feat(media): add upload_token column for MCP signed uploads

app/Models/Media.php

@@ -34,6 +34,7 @@ class Media extends Model
         'size',
         'order',
         'meta',
+        'upload_token',
     ];
 
     protected function casts(): array

database/migrations/2026_05_15_190137_add_upload_token_to_media_table.php

@@ -0,0 +1,25 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('medias', function (Blueprint $table) {
+            $table->uuid('upload_token')->nullable()->unique()->after('id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('medias', function (Blueprint $table) {
+            $table->dropUnique(['upload_token']);
+            $table->dropColumn('upload_token');
+        });
+    }
+};

tests/Feature/Database/MediaUploadTokenColumnTest.php

@@ -0,0 +1,9 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Support\Facades\Schema;
+
+test('media table has nullable unique upload_token column', function () {
+    expect(Schema::hasColumn('medias', 'upload_token'))->toBeTrue();
+});