fix(security): authenticate Vercel ecosystem APIs and clean up uploaded files (#2412)