Add content security policy
Add content security policy

This commit adds a content security policy header using `govuk_app_config`.

alphagov/smart-answers,alphagov/smart-answers,alphagov/smart-answers,alphagov/smart-answers