Add a signed download url

Eventually we may want to refactor this so that the SignedURL can take
additional parameters.

This is a dependency for the download bounce endpoint in the splice go api.