[api] retire flagdetails view

it was never documented and only used by the webui
[api] readd mini-profiler for development

The next goal is readding sane model caching, so it's very useful to have.
[api] remember some values in user and project model

It's a rather simple join to find out if a project is locked, but there is no
point in repeating it 10 times
[webui] make buildresult a backend model

There is no need to go through the API for /build