Export only course files the exporter may read

Course export includes only assets the exporter can read. This closes a path traversal through lesson upload URLs and a leak of other users' private files.