Use Injector to create default Upload_Validator instance

Allows this class to be swapped out with a custom Upload_Validator
globally, without having to call Upload::setValidator() everywhere.