Use Injector to create default Upload_Validator instance

Allows this class to be swapped out with a custom Upload_Validator
globally, without having to call Upload::setValidator() everywhere.
Merge pull request #3336 from halkyon/validator_injector

Use Injector to create default Upload_Validator instance