[codex] fix upload auth and jq typed output

[tiankaima]

Summary

• upload files through the generated authenticated /api/uploads/object client instead of an unauthenticated raw PUT
• normalize typed Go values before applying --jq so generated structs and slices work with gojq

Verification

• go test ./internal/output ./internal/cmd/upload
• go test ./...
• production source smoke: school semesters --graduate --jq length returned 78 before PR creation