Feature: Add Avatar Upload and Processing API

[3m1n3nc3]

Description

Add signed avatar upload, validation, processing, finalization, replacement, and deletion.

File Location

learnault-api/src/domain/assets/, profile routes/services, storage adapter/worker, and tests

Design Reference

API Roadmap Phase 1: Add Avatar Upload and Processing API.

Dependencies

• Status: Blocked
• Blocked by: Feature: Replace Mock User Helpers with Profile API #133 (Replace Mock User Helpers with Profile API); Feature: Add Transaction Outbox and Job Delivery Foundation #122 (Add Transaction Outbox and Job Delivery Foundation)
• Blocks: Feature: Add Identity Profile Wallet Integration Test Suite #137 (Add Identity Profile Wallet Integration Test Suite)

Tasks

• Define storage provider and development fake
• Issue short-lived user-scoped upload intent with size/type constraints
• Verify image and queue scan/metadata/resize processing
• Finalize approved variants atomically
• Retire replaced assets per lifecycle policy
• Test MIME spoofing, oversize, cross-user access, failures, replace, and delete

Acceptance Criteria

• Users cannot finalize/delete another user's object
• Invalid files never become active avatars
• Storage credentials are never returned
• Replacement/deletion follows policy
• Tests/OpenAPI pass

Verification Evidence

• Attach redacted upload flow and fake-provider security/processing tests

Difficulty

Advanced

[Qoder-Undefined]

Hi maintainer am a fullstack developer please assign me this issue ETA 3hours

[grantfox-oss]

🦊 GrantFox — @Qoder-Undefined has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #134)
2. Your PR will be reviewed by the learnault maintainers

Good luck! Track your progress on GrantFox.