encapsulate items.buyItem better in habitrpg-shared/items.coffee so we can call from API, derby, & mobile app