Moved downloaded pk3s to a download/ folder

Also prevented QVM loading from a downloaded PK3. This prevents any possible QVM-related exploits.
Updated foreign QVM searching

Instead of raising an error, a message is now displayed to the client when trying to connect to a server
Merge pull request #46 from clearskies/no-qvmdl

Moved downloaded pk3s to a download/ folder