Use IHostingEnvironment.WebRoot as the default static files root.

#8
Use NotNull.
Use DI to create the middleware (and inject IHostingEnvironment).
Won't the request path have slashes going the wrong way? Does Path.Combine fix that?