deposit: Handle download and aggregation of uploaded tarballs

Instead of using the deposit API raw private endpoint to get aggregated version of tarballs uploaded with a deposit, let the loader handle this possibly costly operation by using the new deposit API upload-urls private endpoint returning URLs for downloading uploaded tarballs.

Fixes swh-deposit#4657 (closed).

Depends on swh-deposit!455 (merged).