Refactoring organisation, bundling and security improvements (#6765)

* * Simplified bundling to just one bundle
* Removed cache invalidation token from bundling
* Generate strong persistent random string on deploy to use for JWT signing
* WIP: moving api-secret and JWT signing to a separate centralized security component
* Moved some server components away from project root
* Fix issues reported by linter

* Ignore detect-object-injection everywhere but the client

* Make admin message button red

* Remove alarms for some security alerts on code

* api_secret is now fully contained in the enclave

views/reportindex.html

@@ -122,7 +122,7 @@
 
   <%- include('partials/authentication-status') %>
 
-  <script src="<%= locals.bundle %>/js/bundle.report.js"></script>
+  <script src="<%= locals.bundle %>/js/bundle.app.js"></script>
   <script src="/socket.io/socket.io.js"></script>
   <script src="/report/js/flotcandle.js"></script>
   <script src="/report/js/loopalyzer.js"></script>