Well, not everyone does such obvious things before posting. Sorry about that! It appears that at least one other person (who I would think knows more than I on this particular issue) expected that a scope that could create a post could also create the uploads to go with it.
Doesn’t it make sense that if a api key can create a post they could also create an upload, just like a user who can create a post can also create an upload?