Add register-photo endpoint for unauthenticated post-registration avatar upload

Shipped

18 أبريل 2026 في 6:56 م UTC

صاحب البلاغ

Kamo

Commit

285d3cc

POST **************** accepts userId + file/fileSm/fileMd/fileLg without a session. Guards: user must be unverified and have no avatar yet, preventing abuse against existing accounts. Stores files to MinIO with the same path structure and sized variants as the authenticated /avatars/photo endpoint.