Fine tune permissions.

* Web processed owned by www-data.
* Code readable and executable by www-data writable by the rogue user.
* Move static files and media files out of the code base.
Remove the roguecat group in favor of just putting rogue in the tomcat group.
Use the rogue username attribute vs hardcoding 'rogue' in the geonode provider.