Use the setgid and default ACLs to make group permissions more sane.

Now anything going on inside the deployment directory should always
continue to be group writable by the deploy group. This should hopefully
reduce the need for things to be chmod-ed or chgrp-ed after the fact.