Consider setting `config.active_storage.draw_routes = false` in production, if not used

[eliotsykes]

Consider setting config.active_storage.draw_routes = false in production, if not needed, to reduce exposed endpoints.

Consider manually adding only the bare minimum active storage routes required for your app, if any.