Restrict the S3 URL of DataFiles to Files processes when using Ponos task auth

The s3_url attribute of a DataFile should only be available to instance admins, or to Files processes when accessed via Ponos task authentication. The current check does not test the process mode.