* Initial phishing page implementation

The phishing page has been setup. The source is in TypeScript, and
some basic unit tests have been written.

* Fix minimum Node.js version

This minimum version is only set to make the linter stop complaining
about us using newer Node.js APIs. The code in this package won't be
run, so this doesn't serve any purpose to consumers. It's set to 14
rather than 16 only because the extension doesn't use v16 yet.

* Fix styles

The page should look roughly like the old one now. The design token
stylesheet has been included, as have our Euclid fonts.

We only use one fontawesome icon here, so the SVG has been inlined
rather than including the entire icon/font set.

* Add SES lockdown

The lockdown steps match what the old phishing page does exactly.

* Fix SES errors

Address SES errors by pinning to the exact version of `globalthis` and
`ses` used by the extension currently, and by updating the babel
configuration to ensure we aren't including transforms for older
unsupported browsers.