'j storage flash' does not work well with complex url(with parameters like Expires,Signature,Key-Pair-Id)

[yanqzhan]

https://xxx/auto-osbuild-***-aarch64-***.raw.xz?Expires=1772447017&Signature=xxx__&Key-Pair-Id=xxx

➤ j storage flash  --insecure-tls $above_complex_url
...
Total flash runtime: 26.88s
Result: FLASH_COMPLETED
~ ⚡$rboard-*** ➤ j power on && j serial start-console

Starting serial port console ... exit with CTRL+B x 3 times

=> ls /sys/devices/soc0/machine
** No device specified **

if I manually specify the url as below, it succeeds:

j storage flash --insecure-tls https://$another_redirected_url/auto-osbuild-aarch64-***.raw.xz
...
Total flash runtime: 12m6s
Result: FLASH_COMPLETED
...
~ ⚡$rboard*** ➤ j power on && j serial start-console
...
localhost login: root

[ambient-code]

Fix Plan

The root cause is that URL query parameters (e.g. ?Expires=...&Signature=...&Key-Pair-Id=...) are stripped during URL parsing in two places:

1. operator_for_path() in jumpstarter-driver-opendal - converts the URL path to a Path object, which discards query parameters. The OpenDAL HTTP operator then makes requests without the auth parameters, getting an error/empty response instead of the actual image.

2. Bearer token path in flash() - similarly uses Path(parsed.path) which strips query params.

Additionally, downstream functions like _get_decompression_command(), _filename(), and _transfer_bg_thread() needed updates to correctly handle paths that may contain query parameters (extracting clean filenames while preserving the full path for downloads).

The fix preserves query parameters as part of the path string passed to the OpenDAL HTTP operator, while ensuring filename extraction (for storage naming and decompression detection) properly strips query params.

[ambient-code]

Fix submitted in PR: #435