deposit: Handle download and aggregation of uploaded tarballs

Instead of using the deposit API raw private endpoint to get
aggregated version of tarballs uploaded with a deposit, let the
loader handle this possibly costly operation by using the new
deposit API upload-urls private endpoint returning URLs for
downloading uploaded tarballs.

Fixes swh-deposit#4657.