[NEW] Photo upload API