Insert a BOM check for import and file upload

* Similar to @janekptacijarabaci fix in greasemonkey/greasemonkey#1940
* Fix compliance with STYLEGUIDE.md and usage of pre-initialized identifiers
* Currently **do not** propagate BOM with meta routine or user.js source with and without installation count increment
* BOM currently shows up in Ace as a exclamation triangle with "This character may get silently deleted by one or more browsers"

**NOTE**: Many thanks to the report by @cvzi and applies to #200 and partially outlined in #198.
Merge pull request #348 from Martii/insertBOMCheck

Insert a BOM check for import and file upload
Address the app generated 503s
* Use proper usage of `maxLag` for process bump.
* Add in simple referer check mentioned in #343 to prevent SEO/abuse.
* Remove separator from `./routesStatic.js` and let `join` do it's op.

Closes #345

**NOTE**: Server cloud services may already handle load balancing but keeping this in for the time being... if it crops up again, bump to a maximum of 175ms. toobusy-js does use timers that are never stopped even at the equivalient of `document-idle` event state. If this package proves long term to be an issue remove it completely... however during testing period it **PASSED**.
Merge pull request #352 from Martii/Issue-345

Address the app generated 503s

Auto-merge
Remove package toobusy-js

* Additional testing data info received that it works okay without it. This closes the `document-idle` equivalent detected timers previously mentioned.
Merge pull request #353 from Martii/removeToobusy-js

Remove package toobusy-js

Auto-merge