Auth
Envie o token no header: Authorization: Bearer SEU_TOKEN
POST /api/upload
multipart/form-data
file (arquivo)
bucket (opcional, valida contra o token)
path (opcional) ex: imagens/2026/
filename (opcional) ex: logo.png
GET /api/list
?bucket=public
?prefix=imagens/2026/
POST /api/delete
{"bucket":"public","key":"imagens/2026/logo.png"}
GET /file/<object_id>?e=<unix_ts>&s=<hmac>
Link assinado (gerado pelo portal ou pelo endpoint /api/sign).