perf(json): uses in-place parsing

So that no temporary memory is needed for parsing sha1 IDs.

Also do not report error if server send garbage after json doc.
There is no such error and it makes no sense to handle it.
feat(demo): upload bundle in another thread