Check backup URLs before Press fetches them

Restore-from-site and Remote File now fetch URLs through the same SSRF checks webhooks use, including each redirect target.