Educational files should not become public URLs by accident.

The platform introduces a production upload endpoint designed to write into a private storage directory configured outside the website document root.