fix(ai-harness-cli): serve signs media URLs with a key derived from the token, so a short token meets the 32-byte key rule

An automatically generated fix could have been available for this error, but the fix-ci step hasn't completed. Ensure it's configured to always run in your CI pipeline to get automatic fixes in future runs. For more information, see the Self-Healing CI docs.