Hide internal files from public directories

[plegner]

Currently, the public directories exposed by express.static() at https://github.com/mathigon/studio/blob/main/server/app.ts#L139 contain some internal files, for example search-index.json in .output and all the course source files like content.md in content/. We should hide these!