In this case we do restrict what data can be sent to the register endpoint, you will need to register the user first and then fire another request to upload the file and modify data (PUT request).
Else you will need to use the extensions system and modify the register controller within the users-permissions plugin.