Lock RFP in release builds

I've said this several times: RFP should be locked.

But I think it's finally time to do it, for 12.5 already, after I've seen a suggestion to disable it to fix a broken website (Firefox Account login 🙈).

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information