Store connectors

Publishing flow: extension validates license → API returns scoped upload token → extension uploads directly to store → reports outcome to API for history.