mvp

injects only into page context, as soon as possible, can bypass all but sandbox CSP, works with manifest v2