Audit code for gracedb best practices

Leo raised an issue that recent code changes are not following the best practice of a generating data products to upload in one task and then passing that dataproduct to a different task that uploads it to gracedb. We need to audit for this. I'm assigning to all librarians so we remember to check for this in new merge requests.