submissions.json: Add JSON-P support

* `/submissions.json` would return `[{…}]`.
* `/submissions.json?callback=foo` would return `foo([{…}])`.