Move assets.yaml into package at h:assets.yaml

Make the asset definitions accessible from dependent projects via
asset spec. This makes overriding bundles easy for custom deployments.
Remove auth bundles from app bundle

They are already required separately in the layout.