Merge pull request #1746 from shackbarth/4601

remove some other caratty dependencies
start readme
update readme
allow skip of npm build if you're using npm link
infer packagejson dependencies from peerDependencies
add steps to readme
Merge pull request #1867 from shackbarth/react

React
Merge remote-tracking branch 'XTUPLE/4_7_x' into react
create new rest endpoints that are authenticated using browser session
Issue #24592 - add bomhead record in bomitem trigger if one does not exist
Issue #24592 - add bomhead record in bomitem trigger if one does not exist
Merge pull request #1874 from krauseo/issue24592

Issue #24592 - add bomhead record in bomitem trigger if one does not exi...
don't build dictionaries on a foundation-database
Merge pull request #1868 from shackbarth/react

create new rest endpoints that are authenticated using browser session
backport xt.locks changes
bump 4.6.1 - web-only patch
back out incorrect view deletion change - probably don't need it anyway
try to fix ci complaints during npm install
ci still gives EACCES errors, now on HOME/.npm, so try backing out npm version peg altogether
Merge pull request #1901 from gilmoskowitz/xtlocksBackport

issue #24559 - backport to 4.6.1