wordcard sync backend (Pages Functions). API: POST /api/upload