KYC & verification

Register compliance files with a secure HTTPS link (hosted drive, object storage, etc.). S3 presigned uploads return 501 until storage is wired.