move the php code in a separate direcotory

PHP code goes in /app
static files go to /static
both are RO bind mounted in the namespaced jail