Serve actual scorm files with good public caching headers to it is served from varnish / cdn

[brendanheywood]

We know the sha1hash for each package and can use that in the pluginfile url so that all real scorm files can be served as immutable and public