window properties: deal with NS once and for all

two things: - legit NS tampered is not always stable: e.g. on safer without webgl allowed, a first load differs from a refresh - we should slice tampered off, sort it, add back, then move event, location, performance to last - we check two hashes - all and tampered - but we don't link them - we can actually just get away with a single hash (all) as that already reflects the tampered items (post constructor)