Add security warning comment to javascript_config.php

Future developers need to be aware of the consequences of exposing
configuration values using this JavaScript interface.