Bundle third-party resources into the plugin itself

[fabacab]

This is both a new WordPress plugin requirement and a best-practice, anyway.

See also https://wordpress.org/support/topic/parser-blocking-cross-origin-script-2/