Serve channel nixexprs.tar.xz directly

By not going through CloudFront, we can serve it over https, which
makes channels more secure. (Though we still need to enable signing of
the binary cache.)
Force MIME type for /irc