Rewrite audio player to fetch src instead of call it directly

[Psi]

This will allow us to send authentication headers via fetch rather than as clientId.

As implemented in stream here and originally found on SO here

This would be in preparation for switching to the v3 api, but can be done on the main branch because it'll make the refactor smaller 😓