Use S3 for upload storage in prod

Needs two new ENV variables: `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` cc @mattmb.

FYI this approach is undocumented so might not work but AFAICT it will work fine.