Private audio storage

Track audio moved to a private bucket with signed URLs, and portal players no longer share playback state.