Purchased Original Image Downloads: Short-Lived Links with Auditable Purchase Mapping

Short answer: keep every original image private, issue a short-lived presigned download URL only...