Add a missing call to download_status_get_next_attempt_at()

This makes next_attempt_at consistent over the control port and elsewhere in the code.

It also makes sure it is only accessed directly in directory.c.

This is a defect on c21cfd2 in #17750 (moved) in master.