feat: redirect to download urls of blobs

[hown3d]

What type of PR is this?
feature

Which issue does this PR fix:
#2752

What does this PR do / Why do we need it:
redirects clients to a presigned urls for blob downloads, which significantly reduces load of the zot server, since the blobs no longer need to go through the server.

Testing done on this change:

Automation added to e2e:

Will this break upgrades or downgrades?

Does this PR introduce any user-facing change?:

redirect clients to S3 URLs when fetching blobs

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[hown3d]

Certain aspects are not covered yet:

• handling nested StorageConfig.DisableRedirects from config (just global is used)

[rchincha]

opencontainers/distribution-spec#299

@hown3d would also show your support upstream.
zot plays a "follower" role to Open Containers specs.

[zer010gic]

Is there any news on whether this PR/Feature will be implemented?

[github-actions]

This PR is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 10 days.

[andaaron]

Assuming the spec allows for 307, what is the expected behavior for auth? The website we redirect to may have authentication.

[joshbwlng]

@andaaron From what I understand, presigned URLs shouldn't have auth issues because they're presigned and only valid for a short period of time. I suppose we could potentially handle this in a download redirect proxy running in front of Zot, but it would make more sense in my opinion for it to be implemented within Zot itself - like it is for docker distribution.