style: enable jscs requireRightStickedOperators rule
docs($sce/insecurl): mention port in the same origin policy

Closes #5759

The default trusted origin appears to be the same protocol+domain+port,
non just protocol+domain.
I patched the doc accordingly.
docs(changelog): release notes for 1.2.14 feisty-cryokinesis
chore(release): update cdn version
docs(*): ensure jsdoc type expressions are valid
chore(package.json): update dgeni dependencies