new config_sample_php manual page

Eyeballs wanted! This is the authoritative config_sample_php reference so it needs to be good. 

The very last item on the page, Custom CSP policy, needs more explanation. The whole page needs review.

Two items are missing from config_sample_php.rst:
version
instanceid

I tried 'singleuser' => true, and nothing changed. All of my non-admin users could still log in and do stuff.

@PVince81 @danimo @LukasReschke @MTRichards @craigpg 
Also `.htaccess` is the filename that will be blocked ;-)

i.e. `array('.htaccess', 'foo')` will block `.htaccess` and `foo`.