feat(*): Scalable registry

Allow the deis registry to be scaled across multiple cluster nodes
feat(database): disable copy on write to improve performance
docs(schedule): add release schedule & planning documentation
chore(registry): Upgraded registry to 0.9
docs(install-deisctl): remove extra installer links and simplify doc
ref(gitignore): clean up old ignores, remove os-specific files

files to be ignored like .DS_Store on OSX should exist in a global
.gitignore file, where it is ignored across all repositories.

See https://help.github.com/articles/ignoring-files/#create-a-global-gitignore
docs(manage-application): reference "deis perms", not "sharing" shortcut
fix(client): add "deis shortcuts" to main help message
fix(*): Handling of unavailable services

Send 503 - Service Temporarily Unavailable for not running services

Fixes #2161
Merge pull request #2574 from mboersma/doc-deis-perms

docs(manage-application): reference "deis perms", not "sharing" shortcut
chore(*): bump CoreOS to 509.1.0 for Docker vulnerability

This PR updates CoreOS to include
[Docker 1.3.2](https://github.com/docker/docker/blob/master/CHANGELOG.md#132-2014-11-20)
which includes [important security fixes](https://groups.google.com/forum/#!msg/docker-user/IrjXTHA6jJc/ZToMGL2yG_AJ).

In addition to upgrading to Docker 1.3.2, we are addressing the
secure-by-default registry settings in #2578 (these changes were
introduced in Docker 1.3.1).

Note that DigitalOcean and Rackspace do not yet have CoreOS 509.1.0.
fix(contrib): add --insecure-registry flag for docker 1.3.2

Deis' registry is insecure. Docker is secure-by-default, which means
that we must now whitelist insecure registries on each and every daemon.
fix(contrib): add other RFC1918 private addresses
chore(builder): bump Docker to 1.3.2
fix(contrib/coreos): fix usage of --insecure-registry
docs(installing_deis): add private network address requirement
docs(contributing): clean up insecure-registry language
fix(store): don't output secretKey and accessKey

In 33fb20e7f94afe164f2ceeb34fc5f2379934f3f7, the removal of the
output redirect for `radosgw-admin user create` means that the
accessKey and secretKey are output in the journal when the user
is created. As these are secrets, they shouldn't ever be printed.

This commit redirects the output of this command to /dev/null.
Merge pull request #2564 from mboersma/simpler-install-deisctl

docs(install-deisctl): remove extra installer links and simplify doc
fix(builder): explicitly call out $TMP_DIR on `docker cp`

https://github.com/docker/docker/commit/31d1d733037b22591e2dd2edfe6c4d2d4b8086cc
prevents a breakout in ApplyLayer, which also seems to break
`docker cp <container_id>:<src_path> .`. This change explicitly calls
out our working directory (TMP_DIR) which behaves the same as before.