initial artifact flow
simplified and more secure upload flow