examples/upload.sh: escape the filename in `curl` invocation, so it can contain commas or semicolons