Instead of using the deposit API raw private endpoint to get aggregated version of tarballs uploaded with a deposit, let the loader handle this possibly costly operation by using the new deposit API upload-urls private endpoint returning URLs for downloading uploaded tarballs.
Fixes swh-deposit#4657 (closed).
Depends on swh-deposit!455 (merged).