Document that yaml files shouldnt be served directly

Documentation for https://github.com/silverstripe/silverstripe-installer/pull/30