ban-dom-globals: remove browser-only APIs from whitelist

[ajafff]

for example these are not available in Node.js:

• atob, btoa
• fetch
• ... needs some more research

[ajafff]

This is what needs to be changed:

• an identifier is considered a DOM global if it has exactly one declaration and that declaration is located in lib.dom.d.ts (or lib.d.ts)
  • this allows using console, setTimeout, ... in a Node.js app
• there should be be two modes
  • browser: allows the use of all classes and a set of whitelisted variables (current behavior)
  • non-browser: disallows the use of all variables, classes and functions