Secure Trash Upload

Single-file, server-side encryption before trash.
AES‑256 at rest
Plaintext temp is discarded after successful encryption. Trash directory: encrypted only.