support for using a CDN for droplet download URIs

specifically, CloudFront is supported for now, but configuration is
kept neutral (i.e. just called "cdn", and all optional)