[native][web] Handle invalid CSAT in fetchAndDecryptMedia

Summary:
Part of ENG-9526

Depends on D13990

Test Plan: Manual testing with mocked invalid access token

Reviewers: kamil, varun, ashoat

Reviewed By: ashoat

Subscribers: ashoat, tomek

Differential Revision: https://phab.comm.dev/D13991