Fix issue where saving a category could report success without storing its thumbnail

Fixes an issue where a category could be saved with a new thumbnail even though the image was never stored, leaving a broken image. Saving now fails with a clear error when the thumbnail cannot be stored, and a rejected change no longer replaces the current image.