Improve security of attachments

Currently, the CloudFront URL of an uploaded attachment in Upbase is accessible outside of Upbase as well, possibly indefinitely.

Tools like Asana and Nifty require you to login to your accounts before accessing such URLs. ClickUp has an option where attachment links, even though publicly accessible, expire after an hour.

I hope Upbase locks the attachment URLs behind a login.