Add `crossorigin="anonymous"` to scripts

[logannc]

As title. This fixes some issues surrounding debugging outside scripts, etc. In particular, the BABEL_CORE script include could use this.

It should probably be configurable for the very rare case when the script tag needs withCredentials.