Upload details & notes
• You can change your profile photo only once. After successful upload, it will be locked.
• Upload will attempt a single server upsert. If server rejects with "resource exists", the upload will stop.
• We will store the final public URL in Firestore under profilePhotoUrl, and set profilePhotoLocked: true.