Add tests and support for enforcing non-aggregation in ArcsJs

[Cypher1]

i.e. a recipe should be able to enforce that a particle cannot use local state or a store to accumulate private data about a user.

This should be implemented via cycle detection, not just checking for a 'stateful' store, as particles could use another particle, or communication between particles to store data.

Needed for #683