fix(bundle-source): apply eval evasion for cjs modules too

[kumavis]

encountered the incompatibility in either 1kce demo or cat ui in https://github.com/endojs/endo/pull/1877

this applies the evasive eval transform to cjs in addition to mjs as we do currently

replaces https://github.com/endojs/endo/pull/2003