Remove vendored and external JS dependencies

[brassy-endomorph]

Is your feature request related to a problem? Please describe.

We should be able to lock down the CSP to only resources hosted on the site, not having a script tag that pulls from a 3rd party repo. Also, we shouldn't have to vendor JS libraries.

Describe the solution you'd like

Webpack seems like the best candidate for just taking a few JS libraries, bundling, and putting them in the /static/ directory.

Describe alternatives you've considered

I am not a frontend dev, and Webpack is what I've used for a long time. A simple config is relatively (lol) straightforward, and it's somewhat agnostic relative to other tools that are more tightly coupled to certain frameworks. If someone really have good JS chops and knows of a stable build tool, please suggest one.