[AZ-488] UAV tile batch upload + 5-rule quality gate

Replaces the 501 stub at POST /api/satellite/upload with a multipart
batch endpoint that ingests UAV-captured tiles, runs each item through
a 5-rule quality gate, and persists accepted tiles via the AZ-484
multi-source storage path with source='uav'.

Quality gate (in fixed order, first failure wins): JPEG format
(content-type + magic), size band 5 KiB-5 MiB, exact 256x256
dimensions, captured-at age (no future >30 s skew, no older than
7 days), luminance variance on 32x32 downsample. Closed reject-reason
enumeration in v1.0.0 contract.

Authorization: custom PermissionsRequirement / PermissionsAuthorization
Handler that reads the JWT `permissions` claim (tolerates both
repeated-string and JSON-array shapes). Endpoint protected by
RequiresGpsPermission policy; 401 without token, 403 without GPS perm.

Persistence: file-first to ./tiles/uav/{z}/{x}/{y}.jpg, then
ITileRepository.InsertAsync UPSERT (per-source UPSERT contract from
AZ-484). Per-item failures reported in response without aborting the
batch. Kestrel MaxRequestBodySize and FormOptions limits set to
MaxBatchSize x MaxBytes (default 100 x 5 MiB = 500 MiB).

New frozen contract: _docs/02_document/contracts/api/uav-tile-upload.md
v1.0.0. PT-08 NFR added to performance-tests.md as Deferred (harness
work tracked in PT-07 leftover, per AZ-488 § Risk 4).

Tests: 11 quality-gate unit tests, 5 handler unit tests, 3 file-path
unit tests, 12 permission-handler unit tests, 7 integration tests
(AC-1..AC-6, AC-8). All 253 unit tests + smoke integration suite
green.

Co-authored-by: Cursor <cursoragent@cursor.com>

SatelliteProvider.Common/DTO/UavTileBatchUploadResponse.cs

@@ -0,0 +1,39 @@
+namespace SatelliteProvider.Common.DTO;
+
+// AZ-488 / `uav-tile-upload.md` v1.0.0 — per-item response shape. Status and
+// RejectReason strings are part of the frozen contract; any change requires a
+// contract minor-version bump.
+public record UavTileBatchUploadResponse
+{
+    public List<UavTileUploadResultItem> Items { get; init; } = new();
+}
+
+public record UavTileUploadResultItem
+{
+    public int Index { get; init; }
+    public string Status { get; init; } = string.Empty;
+    public Guid? TileId { get; init; }
+    public string? RejectReason { get; init; }
+    public string? RejectDetails { get; init; }
+}
+
+public static class UavTileUploadStatus
+{
+    public const string Accepted = "accepted";
+    public const string Rejected = "rejected";
+}
+
+// AZ-488: closed enumeration of reject reasons exposed through the v1.0.0
+// contract. Adding a new code REQUIRES a minor contract bump per the
+// Versioning Rules in `_docs/02_document/contracts/api/uav-tile-upload.md`.
+public static class UavTileRejectReasons
+{
+    public const string InvalidFormat = "INVALID_FORMAT";
+    public const string SizeOutOfBand = "SIZE_OUT_OF_BAND";
+    public const string WrongDimensions = "WRONG_DIMENSIONS";
+    public const string CapturedAtFuture = "CAPTURED_AT_FUTURE";
+    public const string CapturedAtTooOld = "CAPTURED_AT_TOO_OLD";
+    public const string ImageTooUniform = "IMAGE_TOO_UNIFORM";
+    public const string MetadataMissing = "METADATA_MISSING";
+    public const string StorageFailure = "STORAGE_FAILURE";
+}

SatelliteProvider.Common/DTO/UavTileMetadata.cs

@@ -0,0 +1,18 @@
+namespace SatelliteProvider.Common.DTO;
+
+// AZ-488 / `uav-tile-upload.md` v1.0.0 — per-tile metadata supplied with each
+// batch item. `CapturedAt` is normalized to UTC by the upload handler before
+// reaching the persistence layer.
+public record UavTileMetadata
+{
+    public double Latitude { get; init; }
+    public double Longitude { get; init; }
+    public int TileZoom { get; init; }
+    public double TileSizeMeters { get; init; }
+    public DateTime CapturedAt { get; init; }
+}
+
+public record UavTileBatchMetadataPayload
+{
+    public List<UavTileMetadata> Items { get; init; } = new();
+}