Model a media download as a temporary capability, not a permanent URL

When an upstream service returns a media URL, it is tempting to store that string as if it were the final asset. This works in a quick demo. It fails in a real product because the URL may be signed, s