fix: config loading from different sources

- config now gets loaded from different sources based on their
  priority and status
- fixed bug in the files endpoint for retuning content-type to
  be application/octet-stream
- per Ben's comments, added stricter decoding in swift hook