Auxiliary file download

[pdurbin]

What this PR does / why we need it:

Adds the ability to download auxiliary files from the web interface. Also, other cleanup was done.

Which issue(s) this PR closes:

Closes #7400

Special notes for your reviewer:

I talked to @djbrooke about trimming down the changes he made but ultimately didn't because I wasn't sure what to take out or how to best word things. I think it's fine to leave it all in but I'm also fine with some of it being removed.

Suggestions on how to test this:

Use AuxiliaryFilesIT or your own methods to add some auxiliary files. Here are the changes to watch for (from the release note):

Auxiliary Files can now be downloaded from the web interface.

• Aux files uploaded as type=DP appear under "Differentially Private Statistics" under file level download. The rest appear under "Other Auxiliary Files".

In addition, related changes were made, including the following:

• New tooltip over the lock indicating if you have been granted access to a restricted file or not.
• When downloading individual files, you will see "Restricted with Access Granted" or just "Restricted" (followed by "Users may not request access to files.") as appropriate.
• When downloading individual files, instead of "Download" you should expect to see the file type such as "JPEG Image" or "Original File Format" if the type is unknown.
• Downloaded aux files now have a file extension if it can be determined.

Does this PR introduce a user interface change? If mockups are available, please link/include them here:

Yes. Mockups at https://docs.google.com/presentation/d/1XuX4qStdHjkFf4g1d1vKxxb85kuuUSEzdKN41dNM2mM/

Here's a screenshot showing the DP files:

And another showing "other" files:

Is there a release notes update needed for this change?:

Added.

Additional documentation:

Included.

[djbrooke]

Thanks @pdurbin for the PR and for the note about the docs. I took another read through and I think they are fine for now, since we flag this as experimental.

[pdurbin]

• If the tag for an aux file starts with "dp" it will be displayed under "Differentially Private Statistics" under file level download.

Over at opendp/dpcreator#135 (comment) @TaniaSchlatter asked if this could be changed to "dp_" (adding an underscore) and this got a thumbs up from @raprasad.

Yes, this is certainly possible. Let's see what other changes are requested and do them at once.

[pdurbin]

Instead of "starts with dp" we decided to add a proper "type" parameter: d368a85

The downloaded files never had any file extensions. This was fixed in 5c67f95.

Ready for more review.

[pdurbin]

I made many commits to address the feedback above. In addition I just merged the latest from develop to pick up the change to 5.4.1 and renamed the SQL update script. Ready for more review.

[scolapasta]

I checked is only uses as a title on an image lock of a file search card; so let's have consistency and just have the one (restrictedaccess=Restricted with Access Granted)

[pdurbin]

Done in d277aa1. Now the search card is consistent with other places:

[scolapasta]

Just noticed this - why "like" and not straight "="

[pdurbin]

No reason. Fixed in e1d5541.

[scolapasta]

We can now get rid of these and just use:
restricted=Restricted
restrictedaccess=Restricted with Access Granted

[scolapasta]

With the exception of deciding on the API (which we documented as a todo and also explicitly mentioned in the "experimental" section, I think this is good to go. Next up, QA!