Composer attachment rail on the unified `XWUIInputChat` (`surface: "attachments"`). Status is host-driven (`local` / `uploading` / `ready` / `error`); the composer emits `remove` / `retry` and never uploads.