Client-side, don't spend passes for already-uploaded data.

src/_zkapauthorizer/_storage_client.py

src/_zkapauthorizer/_storage_server.py

src/_zkapauthorizer/tests/storage_common.py

src/_zkapauthorizer/tests/test_plugin.py

src/_zkapauthorizer/tests/test_storage_protocol.py