Separate admin app

- Create a new flask app focused on supporting file uploads
- Duplicate existing features around file uploads
- Refactor `UploadedFile` class to be just concerned with validating an uploaded file
- Allow virus scanning to be switched off by an environment variable (this also allows splinter tests to be turned back on)