fix(server): load PR uploads from SSO organizations#21632

fix(server): prefer the repository named by legacy uploads

fix(server): provide the media service to asset requests

fix(server): load SSO-protected PR uploads through signed URLs