OSPO smoke test frontend

CloudFront default behavior is serving this placeholder page.

Upload endpoint: /api/upload?name=smoke-sbom.json