Bind cross-project media signing to its original storage source
When database copies retain media URLs from another Supabase project, routing only URLs from the current project leaves those files on their old public path. Supporting the additional origin requires source-aware metadata and signing, not just a broader hostname check. Keep appli…