FIO-9783: refactor, make dumber

[brendanbond]

Link to Jira Ticket

https://formio.atlassian.net/browse/FIO-9783

Description

We've identified a bottleneck in the way we perform form validation in our Enterprise Server - creating VM contexts per request and executing the entire form orchestration pipeline in those contexts turns out to be kind of slow and expensive.

To mitigate this, I've changed the way the vm library is constructed. Rather than opinionated functions that execute certain concrete evaluations that are tightly coupled to other modules (e.g. formio-server) this library now will only provide a stable API for safely sandboxing and executing code. Gone now will be the days of @formio/vm managing its own dependencies - a game that is difficult to play during development (where you have to ensure that the vm dependencies match the upstream consumers) - and being responsible for things like email rendering (which happens in only one place, formio, and should be managed there).

Breaking Changes / Backwards Compatibility

Yeah, this is definitely a major version of this library. The hope is that it will be relatively stable now, and we won't have to make form.io specific changes here (e.g. to things like email rendering, which belong elsewhere) and can just focus on its job - providing an interface with which to sandbox and execute javascript code.

Dependencies

n/a

How has this PR been tested?

I wrote some new automated tests to cover the new interfaces.

Checklist:

• I have completed the above PR template
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation (if applicable)
• My changes generate no new warnings
• My changes include tests that prove my fix is effective (or that my feature works as intended)
• New and existing unit/integration tests pass locally with my changes
• Any dependent changes have corresponding PRs that are listed above

[travist]

Looks great! Nicely done @brendanbond!