fix: disable session.upload_progress (CERT-EU 2026-018 / CVE-2026-109619)
cc-ci/testme cc-ci: success