Complete Video Upload

Confirm a direct upload landed and hand back the reference to record.

Checks that the object is one this caller's /sign named (prefix), that it exists, and that size and content type are what the signature allowed. An object that fails the check is deleted, so a rejected upload leaves nothing behind. Returns the same {url, filename} shape as /upload/assignment-file, so every caller records it the same way.