Where should I upload sitemap.xml?

Upload it to the website whose URLs it describes, preferably at the root so it is available as https://your-domain.example/sitemap.xml. Downloading it here does not publish it there.

Use your host’s deployment process or file manager. If your platform already maintains that filename, check its behavior before replacing it. After upload, open the public URL while signed out and verify that it serves XML.