Stop loading icon font CSS in sidebar app

Remove live-reload functionality from dev server

Remove autofill-event dependency

All uses of the icon font in the sidebar app have now been replaced by
`SvgIcon`.

The client's dev server had functionality where it could live-update the
sidebar app when certain resources (eg. CSS bundles) were changed without
requiring a restart of the app.

None of the developers were using this functionality, and reloading the
app is not especially painful, so remove it to simplify future maintenance.

Fix manifest not rebuilding after source file changes

Fix an issue where `build/boot.js` and `build/manifest.json` were not
rebuilt after script/style bundles were updated or other resources were
updated in the `build/` directory.

The `updateManifest` gulp task function was not returning a value so
gulp silently treated the task as never completing. I thought this
generated a warning at some point in the past, but it looks like that
was not happening.

This fixes an issue in development where `build/boot.js` would sometimes
be generated before `build/scripts/boot.bundle.js` had been fully
written and then not regenerated after that file was written. This
resulted in an empty or incomplete `build/boot.js` file and as a result
the dev client would fail to start.

This is an Angular/jQuery-specific package which AFAICS is no longer
useful for us. Everything component in the sidebar app that displays an input
field of some kind is now built with Preact.

Bump sinon from 8.1.1 to 9.0.0

Bumps [sinon](https://github.com/sinonjs/sinon) from 8.1.1 to 9.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v8.1.1...v9.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump @sentry/browser from 5.12.1 to 5.12.4

Bumps [@sentry/browser](https://github.com/getsentry/sentry-javascript) from 5.12.1 to 5.12.4.
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-javascript/compare/5.12.1...5.12.4)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.43.1 to 17.0.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.43.1...v17.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.620.0 to 2.624.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.620.0...v2.624.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Make `NewNoteBtn` show login prompt if user not logged in

Apply the same UX to `NewNoteBtn` as to the annotator for attempting
to create new annotations when not logged in. Display login prompt.

Also refactor to remove dependency on `$rootScope` and events

Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 1.7.0 to 2.4.0.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Fix error in angular callback by providing `event` object

Fix error from expected event object in angular

Move rendering of sidebar errors above tabs for consistency.

Apply login-prompt UX to reply action if user not logged in

This has no real effect as the tabs are not rendered when sidebar errors
are rendered, but for consistency, let’s put all sidebar-ish errors
above the tabs.

Disable unauthenticated annotating and highlighting

Address remaining contrast nits

We’ve decided not to remedy this for now, as the `disabled` state
and other attributes of the publish button suffice, but in the future
it would be good to find a better contrast solution here.

Increase contrast in annotation cards to meet WCAG AA requirements

Increase contrast of Button components (a11y)

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.619.0 to 2.620.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.619.0...v2.620.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Assume white background by default in a11y tests

Add `lang=""` to user-generated/chosen content in sidebar UI

Do not set "aria-pressed" attribute for non-toggle buttons

Several accessibility tests were failing incorrectly because axe-core
compared the component's foreground text color against the #ececec color
used for the body of the sidebar app, whereas the components are in fact
rendered on a white background.

Change a11y tests to assume a white background by default, as that is
the case for _most_ elements in the UI. Individual a11y tests can customize
this as appropriate.

Tag suggestions are user-supplied content, so indicate that language is
unknown/may differ from the UI.

Setting the `aria-pressed` attribute on a button indicates to assistive
technology that it is a toggle button. Because the `Button` component
always set this attribute and the `isActive` prop had a default value of
false, this meant that every `Button` in the UI was identified as a
toggle button by screen readers.

Fix the issue by renaming `isActive` to `isPressed` and aligning it with
the behavior of `aria-pressed`:

 - If `true`, the button is a pressed toggle button
 - If `false`, the button is a non-pressed toggle button
 - If undefined, the button is a regular button and `aria-pressed` is
   not set