Bundle backend security (HMAC-signed upload tokens, server-built objectKeys, mentor-or-team-member auth) with the actual file UI that didn't exist yet (Files tab placeholder, file-promotion-panel mock array, and applicant-side gap). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>