Add .htaccess files

.phtml files get rendered in plaintext by apache2. Stop people viewing
them directly! (security).