[lib][keyserver] Handle invalid CSAT on blob download

Summary:
Part of ENG-9526

Depends on D13988, D13956

Test Plan: Manual testing with mocked invalid access token

Reviewers: kamil, varun, ashoat

Reviewed By: ashoat

Subscribers: ashoat, tomek

Differential Revision: https://phab.comm.dev/D13989