Washington Post upstream merge #1 (Aborted)

[simongle]

This includes some cherry-picked changes from our fork:

• add healthcheck with django-watchman
• enable separate s3 bucket for user uploads
• use v4 pre-signed s3 urls for private files
• re-enable chunked uploads

[simongle]

a rebase went bad, going to redo the branch