deployment: separate code and deployment user

[aaronkaplan]

The code should not be run under the same user as the deployment user. Recommendation by @alexlist

[tanzer]

It doesn't in the scenario documented in the README:

• deployment is done by user ffg,
• code is run by user www-data.