Proxying for link hrefs

[jkeifer]

With the new asset proxy support from #991 we now have a robust solution for providing access to assets in private buckets by proxying via presigned URL redirects. But one thing this feature overlooks is the potential need to also proxy access to some link hrefs, such as for canonical records of items in object storage, or previous versions of items.