Treat the "temp" repo zone as private
* The primary user is the upload stash. Both stashed originals and thumbnails can
be viewed through Special:UploadStash, which checks the appropriate permissions.
There is no need for direct web access.
* Note that the scaler URL has to point to something that does no authentication
checks since the HTTP GET has no cookie headers propagated. However the file
name is the URL is determined by us_path, which is not exposed to the author
but rather stored in the DB and linked by the file key. The author should only
know the key.
* Also changed getTempRepo() to set the thumb/transcoded zones to nest in
the base repo temp zone. This way, the temp and base repo do not conflict
as to whether a container might be private or not.
Change-Id: I403520053b2053094e5f90083b6375bc04c351f4