[BUG] Sensitive info leakage potential

**Describe the bug**
The current implementation exposes at least some of files in the working folder to the internet.
This can be mitigated by separating the working folder (and the static files) in one folder and the more sensitive content in a different folder...however this does not seem to be the intended path as this will break the automatic restart if e.g. the .py file changes.

**Minimal Reproducible Example**
Kindly open in your browser the following link (to illustrate the issue):
[https://fastht.ml/requirements.txt](https://fastht.ml/requirements.txt)

**Expected behavior**
Don't expose files not specifically mounted via starlette Mount and StaticFiles?

**Environment Information**
Please provide the following version information:
- fastlite version: 0.1.2
- fastcore version: 1.8.0
- fasthtml version: 0.12.9

**Confirmation**
Please confirm the following:
- [X] I have read the FAQ (https://docs.fastht.ml/explains/faq.html)
- [X] I have provided a minimal reproducible example
- [X] I have included the versions of fastlite, fastcore, and fasthtml
- [X] I understand that this is a volunteer open source project with no commercial support.