Add get_media_dir() as an extra allowed root in file_preview path resolution so uploaded images and documents remain previewable even with workspace restrictions on. Closes #5028
Prefer ${VAR} env references in config over plaintext keys on disk. Closes #4803