Serve public files of every extension

Public files were served off disk only for an extension allowlist; anything else 404ed despite being on disk.