use the right signatures for CSS validation.

also dont pick up versions that have been previously deleted from
localStorage.
slightly improved caching for the packager

(now does per module on css, and per include array on JS)
make version updating signals private on client / server