* Makes message with errors non-editable

as assignable affiliation when the current user is an admin.

https://xmpp.org/extensions/xep-0045.html#affil-priv

Show the actions dropdown on the right, like with other messages, and
don't wrap them.

Fixes #2067

by checking for the affiliation data on the probe response presence and
not on the occupant model (which might be created from a message and
therefore not yet have up to date affiliation data).

* elements where too large
* ugly drop shadow

instead just set the classes directly on the custom element

As far as I can tell, this fixes #1346 (or it was fixed already)

By registering a one-time event handler for a unique event name

After some back-and-forth, I think it's still better to keep markup in
templates (instead of having them directly inside the components)
becaues it makes it easier for people to modify Converse.js (at the
expense of some developer ergonomics).

Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.3 to 0.1.4. **This update includes a security fix.**
- [Release notes](https://github.com/faye/websocket-extensions-node/releases)
- [Changelog](https://github.com/faye/websocket-extensions-node/blob/master/CHANGELOG.md)
- [Commits](https://github.com/faye/websocket-extensions-node/compare/0.1.3...0.1.4)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [uglify-js](https://github.com/mishoo/UglifyJS2) from 3.8.1 to 3.9.1.
- [Release notes](https://github.com/mishoo/UglifyJS2/releases)
- [Commits](https://github.com/mishoo/UglifyJS2/compare/v3.8.1...v3.9.1)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>