Support injecting scriptlets in one shared scope

[chrmod]

Each scriptlet func inlined its own safeSelf(), so stacked hooks compounded (2^n). #63 shared the cache through a Symbol.for property on globalThis, which pages can enumerate and use to reach the unhooked natives.

uBO avoids this by running all scriptlets of a frame in one scope with each dependency declared once. This gives the extension what it needs for that, and drops the per-scriptlet func wrappers together with the global:

• functions: every function once; each scriptlet gets fn and dependencies
• compose(calls, scriptletGlobals): one code string per injection, for registered scripts and chrome.userScripts.execute
• run(scriptletGlobals, calls): one self-contained function for chrome.scripting.executeScript

Bundle goes from 2.2 MB to 0.5 MB.