Resolves #1838

Add `autosaveService`; save new highlights automatically

Add a new `autosaveService`, which subscribes to the store and
automatically saves new highlights. Remove implementation of highlight
auto-save from `Annotation` controller.

Fix compatibility of create-github-release.js with @ocktokit/rest v17

https://github.com/hypothesis/client/pull/1824 bumped @ocktokit/rest to
v17.0.0 but this contained breaking changes which were not accounted
for.

Remove unused sourcemap upload scripts

We currently upload sourcemaps to https://cdn.hypothes.is alongside the
JS bundles for a particular client release. Sentry will fetch them from
the URLs specified by `//# sourceMappingURL` comments in JS bundles
without us having to upload the sourcemaps to Sentry directly.

We were not running these scripts as part of the current QA/prod release
process on Jenkins.

Remove mkdirp dependency

Stop loading icon font CSS in sidebar app

Remove live-reload functionality from dev server

Remove autofill-event dependency

All uses of the icon font in the sidebar app have now been replaced by
`SvgIcon`.

The client's dev server had functionality where it could live-update the
sidebar app when certain resources (eg. CSS bundles) were changed without
requiring a restart of the app.

None of the developers were using this functionality, and reloading the
app is not especially painful, so remove it to simplify future maintenance.

Fix manifest not rebuilding after source file changes

Fix an issue where `build/boot.js` and `build/manifest.json` were not
rebuilt after script/style bundles were updated or other resources were
updated in the `build/` directory.

The `updateManifest` gulp task function was not returning a value so
gulp silently treated the task as never completing. I thought this
generated a warning at some point in the past, but it looks like that
was not happening.

This fixes an issue in development where `build/boot.js` would sometimes
be generated before `build/scripts/boot.bundle.js` had been fully
written and then not regenerated after that file was written. This
resulted in an empty or incomplete `build/boot.js` file and as a result
the dev client would fail to start.

This is an Angular/jQuery-specific package which AFAICS is no longer
useful for us. Everything component in the sidebar app that displays an input
field of some kind is now built with Preact.

Remove a dependency that is no longer needed with current versions of
Node.

Bump sinon from 8.1.1 to 9.0.0

Bumps [sinon](https://github.com/sinonjs/sinon) from 8.1.1 to 9.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v8.1.1...v9.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump @sentry/browser from 5.12.1 to 5.12.4

Bumps [@sentry/browser](https://github.com/getsentry/sentry-javascript) from 5.12.1 to 5.12.4.
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-javascript/compare/5.12.1...5.12.4)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.43.1 to 17.0.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.43.1...v17.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.620.0 to 2.624.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.620.0...v2.624.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Make `NewNoteBtn` show login prompt if user not logged in

Apply the same UX to `NewNoteBtn` as to the annotator for attempting
to create new annotations when not logged in. Display login prompt.

Also refactor to remove dependency on `$rootScope` and events

Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 1.7.0 to 2.4.0.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Fix error in angular callback by providing `event` object

Fix error from expected event object in angular

Move rendering of sidebar errors above tabs for consistency.

Apply login-prompt UX to reply action if user not logged in

This has no real effect as the tabs are not rendered when sidebar errors
are rendered, but for consistency, let’s put all sidebar-ish errors
above the tabs.

Disable unauthenticated annotating and highlighting

Address remaining contrast nits

We’ve decided not to remedy this for now, as the `disabled` state
and other attributes of the publish button suffice, but in the future
it would be good to find a better contrast solution here.

Increase contrast in annotation cards to meet WCAG AA requirements