Add sample .env file with required variables
Update README with foreman instructions for cake cut
Vendor most node packages

- Except for http-server, which "prefers" to be installed globally
Add defaults S3 headers for public visibility