use serverwebroot env var everywhere that needs it

• postsignindex needs to rsync files to serverwebroot
• build, makebs, postpublish and postsignindex push status JSON to serverwebroot
• git pull will update file perms whenever a file changes, so reset them.