Harden quarantine provisioning; enforce strict permissions and update Ansible and docs

examples/logrotate.d/upload-logger

@@ -0,0 +1,9 @@
+/path/to/your/project/logs/uploads.log {
+    daily
+    rotate 14
+    compress
+    missingok
+    notifempty
+    copytruncate
+    create 0640 www-data www-data
+}