add newuser-max-attachments setting

Continuing the separation of images & attachments, this PR adds the `newuser-max-attachments` setting.