Get public media

Serves a message media attachment. No authentication required — the unguessable media ID in the path is the access token, mirroring how carriers serve MMS media. Usually responds with a 302 redirect to short-lived object storage; while a just-received attachment is still being mirrored, the body is streamed directly instead. URLs are stable and do not expire.