Reorganizes local git support to exclude from web
Swaps sha1 usages to md5 to avoid needing sha1 on the web (md5 is required by Gravatar)
Avoids crypto-browserfy and imports md5.js directly
Uses platform crypto for random nonce strings

While -G & -S aren't equivalent, this gets as close as we can AFAIK

Reduces startup git calls

Adds proper reveal to repo folders
Adds reveal to contributors git commands

Removes bad test code & improves cancellation

Avoids process.hrtime for web builds