Use fingerprint in asset URL to cache-bust cloudfront

**This is not a real pull request**, just the initiation of a conversation…

@thomasmarshall identified that when we’re serving assets through CloudFront, the “Upload a new version” feature isn’t going yield a new URL, and therefore won’t bust the cache.

Could we potentially include the file fingerprint in the URL?