Upload a user's profile photo

Uploads a profile photo for a user. The image is re-encoded to WebP server-side and stored in the public websites bucket under {staging_domain}/assets/users/photos/ so it's servable via CloudFront for the company's public website. Requires the company to have at least one Website record — otherwise upload is refused. Updates Utilizadores.website_photo_url with the resulting CDN URL.