Move sensitive config files out of public svn

[slinkp]

It's only a matter of time before somebody accidentally checks in actual private keys to http://svn.opengeo.org/almanac/siteapp/trunk/data/flickr.cfg
... same for recaptcha.cfg

those files must be moved out of public svn.
we need a private repo like we use for eg. openplans site configs.

also, they should end up at least symlinked into a more reasonable place, like etc/