Refactor some of our js files #274

In particular:

• there's a growing amount of file IO logic in src/chrome/content/code/HTTPSRules.js that probably shouldn't be there
• the cert whitelist management code in src/components/ssl-observatory.js could arguably be in its own file