S3 proxying & metadata in postgres

- [x] fill in the rest of this
- [x] no really, this place is a mess
I dunno!  The path is a pretty unique identifier, but there's (currently) no database constraint on it.