Keep attachment blob URLs alive so Safari can download them

Attachment blob URLs now revoked on a delay instead of immediately after anchor click, letting Safari fetch before revocation.