ant: fakelocalsettings start with '<?php' now

This would let us inject arbitrary PHP code in a PHP context, for
example the ExtraSettings.php snippet.

Change-Id: I887ebf16cd153bbf2447b5ffd00e3f3cd574a8cb