Upload Virus Scanning

Scan uploaded files for malware before they are made available for download.

Why deferred: adds a paid scanning dependency/service for a risk that is not yet real.

Revisit when: public or anonymous uploads become a genuine abuse risk. Start with file size/type restrictions and signed-URL boundaries; add scanning only if that proves insufficient.