Adds a logo or brand asset to the tenant's image library and optionally links it to identifiers. Requires an Enterprise subscription and the brand image library enabled for the tenant (otherwise 403 with ErrorCode FEATURE_DISABLED).

Supply the bytes ONE of two ways - exactly one of dataBase64 or imageUrl, never both and never neither (400, ErrorCode MISSING_REQUIRED_FIELD). Prefer imageUrl when the logo is already published on the customer's own site; the URL must be https and is fetched through an SSRF guard, so private and internal addresses are refused.

Images must be PNG or JPEG, 4 MB or smaller, at least 64 px on the short edge and at most 4096 px on the long edge. The declared contentType must match what the bytes actually are - the file is sniffed and a mismatch is refused; any Content-Type returned by imageUrl is ignored for the same reason.

Images are content-addressed: imageID is the SHA-256 of the bytes, so uploading the same image twice does not duplicate it. The second call returns Existed: true and simply applies linkTo.

Up to 50 images per tenant and up to 3 per identifier; exceeding either returns 409. Get identifierIDs from list-brand-identifiers.