PT-2026-51630

Summary Git LFS storage is content-addressed by OID alone /// but per-repo authorization lives in the lfs object table keyed repo id, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repo id, oid row pointing at it without verifying the request body...