[4.x] Sign temporary file upload references

Generate the temporary upload reference through the existing signed-path helpers and resolve it back the same way, keeping the reference format consistent with how upload paths are already signed elsewhere.