Server config: block access to all .editorconfig files

[jenlampton]

We keep getting security reports about .editorconfig files since they can be a possible attack vector (though they are not a risk fir us). It would be nice to prevent the reports coming in :)