Fix permissions for temporary upload file for API uploads

[bernt-matthias]

I noticed that workflow test upload jobs jobs fail when testing against my instance (which uses a real user setup). Problem is that the temporary upload file does not respect the umask (because files created using tempfile just do not do this).

The quick fix implemented here is fixing this by changing the permissions. Note that uploads via the web interface are not affected because they go this way.

Ultimately: it might be better to store the files in the job working dir, but this task seems to be to large for me.

How to test the changes?

(Select all options that apply)

• I've included appropriate automated tests.
• This is a refactoring of components with existing test coverage.
• Instructions for manual testing are as follows:
  1. [add testing steps and prerequisites here if you didn't write automated tests covering all your changes]

License

• I agree to license these and all my past contributions to the core galaxy codebase under the MIT license.

[mvdbeek]

it might be better to store the files in the job working dir

that isn't possible, uploads start before any job exists

[github-actions]

This PR was merged without a "kind/" label, please correct.