pulled mock & flatphone images into the repo

this prevents "untrusted connection" stuff w/ https & doesn't hammer
their servers