Use S3 for upload storage in prod

Needs two new ENV variables: `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` cc @mattmb.

FYI this approach is undocumented so might not work but AFAICT it will work fine.
atm everywhere is still rails 'production'. On the todo list to make it just staging and prod.