CSS-like string in comment is removed in safe_html with Python 2.7.7 or later.
test: recent 'file' returns application/vnd.ms-office as mime-type for Excel files.

also re-export *.doc and *.xls files using recent Libre Office.
update functional test to follow changes in erp5_discussion.
Alarm_acceptSubmittedCredentialList: Activate "accept" transition.

This removes the need for limitting the number of documents to
process in a single transaction, thanks to searchAndActivate.
Also, handle catalog desynchronisation gracefuly in the event
of accept/accept race condition.
credential_interaction_workflow/scripts/Call_alarmActiveSense: Simplify.

Save one reindexation activity if alarm is not triggered.
Drop single-use locals.
Drop comment telling what the code already expresses.
CMFActivity: Set transaction user and note when executing Message.

In normal Zope usage, ZPublisher does this. TimerServer does not provide
publisher with a request (which would be irrelevant anyway), so
CMFActivity-managed transactions notes are empty.
Notes are useful to identify the cause of an object modification, so set
them in CMFActivity.
Test: warn before removing static files
ui test: chain Bar to foo_workflow