add /.cdn-util, replace config loader

- Add /.cdn-util endpoint (protected by key)
- Add Prometheus metrics (disabled by default) under /.cdn-util
- Replace configuration loader with Viper, config files are now
  supported
- Rename some config flags + environment variables