Make CHR-ROM accesses go through the mapper, and parent the ROM to the mapper.

This eliminates some unsafe code overall.