Client container file inbox

[fjl]

The simulator API allows uploading files into the client container when it is started. This feature is very important, but the way it is implemented right now is a bit dangerous: the simulator can basically overwrite any file. I have a feeling that this may lead to hard-to-debug failures.

I propose that files sent by the simulator should be placed in /hive-files instead.