Change the way surge-model-collector config works

- locations are now loaded from a local JSON file
- we now push our writeable API rather than making a local copy of the
 API and issuing a management command

[Delivers #80543482]