CloudFront-related fixes

* Set cache headers on `grunt release` for assets to give us 5 minute expiration windows
* Add 404 page (w/ reusable template)