Keep public and private course assets apart on import

Course import now stores assets under separate `assets/files/` and `assets/private/files/` folders matching their URLs.