Add query component to scm URL

Previously when constructing a scm URL from a path, if scm was not enabled
we returned a file URL. This could result in some unexpected behavior.
For instance, when a directory was selected in the file browser,
activating "SCM Status" would just open the untracked directory.
This patch, insteads, adds a query to the scm URL that can be parsed to
determine how to handle the scm status request later on.
Only enable “file” services for file browser context menu

The services support in the file browser was mainly added to allow Quicksilver to grab the selection, I do not recall if this is why the selection was (also) made available as a regular string (in addition to the “file names pasteboard type”).
Handle dropping CR delimited text

Also filter malformed UTF-8 sequences from dropped text.
Use custom script to simulate “codesign --deep”

The problem is that with a bad internet connection there is a very high probability that “codesign --deep” will fail due to having to contact the timestamp server for each embedded executable object.

Long-term we probably want to sign the sub-targets as they are produced and/or link the entire thing together so that there is only a single sign target (plus embedded plug-ins).
Update shebang to explicitly call ruby 1.8
Add upload (ninja) target
Add -t/--tag option to bin/upload

Presently unused but mandatory.
Use GitHub’s (preliminary) API for uploading releases
Add credits email hash for rdwampler