As I understand, this PR allows attachments to be uploaded for an issue - but not for Merge Requests, wiki projects, etc.

How about putting the upload API at the Project level? The `project_controller` would handle uploading and deleting images. And the same browser code could be used to upload an image from anywhere in a project: issues, MR, wiki, wall, all the same code.