Create one-time signed upload URLs for several objects in one call

One signed upload URL per requested file, in objects. PUT each file body to its upload_url using its token; all are valid for expires_in seconds, single use. The whole request fails if any single file cannot be signed.