docs: add object storage configuration contract Documents where each object storage value comes from, how it reaches the backend, the fail-closed deployment gate, and how to rotate, verify and diagnose it.