Hello guys. Can commerce api attach a user provided file to its customer record?

No

Commerce API can't do it, but you do have suitescript capabilites on any backend file (service, ssp library). You can combine that along with some front end magic to get your desired result..