feat: more robust config downloading
This supersedes !157 (closed). Really appreciative of @msaimper who showed that deleting the config and retrying works, which indicated that we just need more robust logic that handles errors better, which is what this MR does -- avoiding the need to delete anything.