Make s3fs package fully compatible so that it can be extracted again

[fm3]

In #6421, the s3fs package was included in webKnossos. If we can make it fully compatible with the upstream repo, we could publish it on maven and/or create a pull request.

This needs a credentials provider that can look in the chain again, but can also be turned off (for the current unsigned behavior)
It would also need to include the other configuration again that was omitted.

Not sure if the aws client should be downgraded again to match the upstream repository’s dependencies. The upgrade may break other functionality that we cannot test.