fix: also treat auths in cooldown (next_retry_after) as invalid during sync

fix: sync checks local management status before downloading from R2

fix: make objectstore sync bidirectional + add mc timeout

Fix duplicated auth mirror paths

Fix Space startup by mirroring objectstore locally