Get an artifact upload session

Endpoint for clients to get artifact upload-session state.

Note: caller must be a client. For users, this endpoint will return a 403 as they are not expected or allowed to call this endpoint.