new config_sample_php manual page

Eyeballs wanted! This is the authoritative config_sample_php reference so it needs to be good. 

The very last item on the page, Custom CSP policy, needs more explanation. The whole page needs review.

Two items are missing from config_sample_php.rst:
version
instanceid

I tried 'singleuser' => true, and nothing changed. All of my non-admin users could still log in and do stuff.

@PVince81 @danimo @LukasReschke @MTRichards @craigpg 
Not for malicious code fragments, it checks the app for usage of the private API instead the public one and if this is the case the app cannot be installed.