vault: support application/octet-stream content type
When using the Azure direct download functionality, the content type gets reset to application/octet-stream, which is valid (albeit suboptimal) for gzips.
This also adds a test scenario for redirected downloads such as those used in production.