Delete Upload
Delete an upload and its associated file.
Permanently removes the upload record and schedules the stored file for deletion. The record is removed first; the file is cleaned up asynchronously after the response so storage removal only happens after a successful commit.
If the upload was previously confirmed against a workspace-scoped resource, the consumed storage bytes are released back to the workspace quota, keeping the workspace storage counter accurate.
Callers can delete uploads in any state (pending or uploaded). Deleting
a pending upload (e.g. after an expired presigned URL) is the correct way
to clean up an abandoned upload attempt.
Delete is owner-scoped: the lookup is limited to the caller’s own uploads, so no workspace-role gate applies — a caller can only remove their own upload, never another member’s workspace content.
Dual-auth: Bearer JWT or API key (scope uploads:write).
Authentication
Onepin live API key (op_live_...). Test and public keys are reserved in Phase 1.

