build: move to npm scripts

Gulp sometimes hangs indefinitely when running tests on Travis.
build: export as Compose in dev mode
sanitizer: emit a 'sanitize' event

This allows for cleaner separation of concerns; the sanitizer does
not need to know anything about other plugins (e.g. smart text).