Allowed file extensions should not be hardcoded

[gn36]

The allowed file extensions for code upload are currently hardcoded in controller/main.php This should be replaced by either a configurable interface for the extension or coupled to the allowed file extensions in the attachment settings.