Block web requests to Grunt config files

Now that we support using Grunt to compile LESS, concat JS, etc., we should make sure project-specific configuration files aren't publicly accessible.

This can be done by adding an entry in our Nginx `default` conf.

Related #29