Expose the SignedURL function of the bucket through the Sink interface.
Some blob backends will support this.

It's hard to test signed URLs with actual servers, so for now we can
only test some backends return a "not implemented" error.