Add canonical source URI to course and instance

[florian]

An instance should know its URI, and courses should know their source URI.

One rationale is to prepare pre-fetched offline courses, and subsequent updates from the canonical source.

DCMI source could be the term.

There should be a layer of authentication, e.g. by signing the course with an established signature algorithm.

[florian]

See #144