Here’s an answer that everyone will hate: cram the image content into the note either in content or a custom tag field.

That way, the signed event contains the payload image at all times. No need for external storage.