restrict sites to their platforms as another security layer

this also makes sure that ~/config/includes/global.inc exists so that open_basedir checks don't break

this is just a quick workaround to make sure sites can't access the aegir site database, which should be kept in a separate platform

Spotted and original patch by: emspace