Services can be configured in `config/storage.yml` with a new key `public: true | false` to indicate whether a service holds public blobs or private blobs. Public services will always return a permanent URL. Deprecates `Blob#service_url` in favor of `Blob#url`.