moving media and backups to R2

free egress changes the maths for a video app. buckets per app, scoped keys, and a nightly volume snapshot.