fix(read): handle indexed ranges within the first encrypted block

Signed-off-by: Feng Ruohang <rh@vonng.com>

cmd/object-api-utils.go

@@ -916,7 +916,7 @@ func NewGetObjectReader(rs *HTTPRangeSpec, oi ObjectInfo, opts ObjectOptions, h
 			}
 			// Decompression reader.
 			var dopts []s2.ReaderOption
-			if off > 0 || decOff > 0 {
+			if off > 0 || decOff > 0 || decryptSkip > 0 {
 				// We are not starting at the beginning, so ignore stream identifiers.
 				dopts = append(dopts, s2.ReaderIgnoreStreamIdentifier())
 			}