Signs a stored template's URL and downloads it — the single copy of sign -> fetch -> bytes, so the size cap and timeout protect every caller.
Signs a stored template's URL and downloads it — the single copy of sign -> fetch -> bytes, so the size cap and timeout protect every caller.