Move uploads directory out from www root, to /known/uploads

Because security. Fixes #3. Thanks @michielbdejong!
Add a note to the README, clarifying that this image is still beta

Lack of support for running behind an SSL offloader for example is
serious enough to warrant a warning.