Fix paths for Debian.

Also make init script and daemon itself executable.
Allow channels that require a token to join.
Fix bugs.
Allow channel tokens to be claimable.

Tokens can be configured to any subscriber, but only to the first subscriber
that claims them.
Move to new model of channel auth.
Escape message text as JavaScript string.
Allow hostid to be a standard-format UUID.