PBM-1689 Restore stuck on chunks download

[jcechace]

ticket: https://perconadev.atlassian.net/browse/PBM-1689

before:

pbm restore 2026-06-25T11:27:22Z -w -y

Starting restore 2026-06-25T11:47:05.333362065Z from '2026-06-25T11:27:22Z'..........Started logical restore.
Waiting to finish.......................................................

and agent is stuck at

2026-06-25T11:47:53Z W [rs1/rs101:27017] [restore/2026-06-25T11:47:05.333362065Z] errGetObj Err: operation error S3: GetObject, https response error StatusCode: 403, RequestID: 3ZXPW115VWPJSY92, HostID: qEzQvClNLGWp+XJcLOAR9JWL/hDs+8jW67B49Jk4vpZesh9u14hpl6ZNxsLxo6VWQ0Eylte3imIf25bkLMPl/qclG1qG4eKS, api error AccessDenied: User: arn:aws:iam::...:user/pbm-jakub is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:eu-central-1:...with an explicit deny in an identity-based policy
2026-06-25T11:47:53Z W [rs1/rs101:27017] [restore/2026-06-25T11:47:05.333362065Z] failed to download chunk 0-8388607
2026-06-25T11:47:53Z W [rs1/rs101:27017] [restore/2026-06-25T11:47:05.333362065Z] retryChunk got failed to download chunk 0-8388607 (of 9841) after 2 retries: operation error S3: GetObject, https response error StatusCode: 403, RequestID: 3ZXPW115VWPJSY92, HostID: qEzQvClNLGWp+XJcLOAR9JWL/hDs+8jW67B49Jk4vpZesh9u14hpl6ZNxsLxo6VWQ0Eylte3imIf25bkLMPl/qclG1qG4eKS, api error AccessDenied: User: arn:aws:iam::...:user/pbm-jakub is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:eu-central-1:119175775298:key/5ecc3fe9-f6ff-4265-9439-294bf25ed72b with an explicit deny in an identity-based policy, try to reconnect in 9s
2026-06-25T11:48:02Z I [rs1/rs101:27017] [restore/2026-06-25T11:47:05.333362065Z] session recreated, resuming download

after:

pbm restore 2026-06-25T11:27:22Z -w -y

Starting restore 2026-06-25T11:42:04.867306196Z from '2026-06-25T11:27:22Z'...........Started logical restore.
Waiting to finish......................................Error: operation failed with: mongorestore: restore mongo dump (successes: 0 / fails: 0): I/O failure reading beginning of archive: compose: metadata: new metafile reader: download: "metadata.json": SourceReader: download 'pbm-jakub/2026-06-25T11:27:22Z/rs1/metadata.json': operation error S3: GetObject, https response error StatusCode: 403, RequestID: 3NF83S9TMEST23RB, HostID: iIZdTq9sxmPDM+iJ5a74vIodVOdhYDoIsMNXs4uNm5/7Qd2jTmNCFIWwA7fGWcfhDkV31xIUyD5Pp9oPwfplor8n5izan3fM, api error AccessDenied: User: arn:aws:iam::...:user/pbm-jakub is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:eu-central-1:... with an explicit deny in an identity-based policy