Refactor: Update loader crate (bindle get) to use AnyAuth

[vdice]

The loader crate currently uses a No Auth/in-house 'BindleTokenManager' approach when getting bindles. This should be updated to use AnyAuth per #407 (comment).

Follow-up from #407

[itowlson]

Fixed via #456.