Ans 1) You can always create a publicly accessible url by hosting this sdk in a server which access all such static files. Ex: ngnix server, aws -S3, locally by ngrok tunnel etc.
Ans 2) If you were to make any kind of changes related to bot configuration then you must make it in kore.ai/botbuilder. No other method. Only UI changes can be done in websdk