AddScanSessionPhoto

Multipart request DTO for POST /v1/scan/sessions/{token}/photos. Mirrors the MIME + size caps of {@see PantryPhotoScanRequestData} so the two photo-upload surfaces share one trust-boundary contract. The 12 MB cap leaves headroom for HEIC bursts beyond the per-photo cap on the batch endpoint while still bounding worker memory per request.