Fix race condition in concurrent downloads for duplicate URLs

This commit fixes the issue by:
- Adding @downloads_by_location hash to track downloads by file path
- Deduplicating downloads based on cached_location instead of
  Downloadable object identity
- Ensuring multiple downloadables sharing the same file reuse the same
  download future

Fixes #21425