add integrity to tokenscript sources

[SmartLayer]

trafficstars

<script src="generalisedtime.js"
  integrity="sha384-oqVuAfXRKap7fdgcCY5uykM6tR9GqQ8K/uxy9rx7HNQlGYl1kPzQho1wx4JwY8wC"
  ></script>

and:

<link rel="stylesheet" href="shared.css"
    integrity="sha384-oqVuAfXRKap7fdgcCY5uykM6tR9GqQ8K/uxy9rx7HNQlGYl1kPzQho1wx4JwY8wC"
    ></link>

(they are useful in reducing the size of complicated TokenScript to avoid repeated reference to the same set of stylesheets and Javascript. Also, I expect people to hate CDATA but we can't rid them without providing hash of the sourced Javascript yet there is no developer tools to do so.)