drop — static site host. POST /api/upload with a token.