add the config option to disable uploads and downloads

[johrstrom]

Fixes #3140

Remaining work:

• the files app still responds to drag and drop uploads. They fail because there will be no route, so that needs to be picked up. I didn't tackle it here just because I think it's even more changes, so I'd like to defer it.