Add CSP
Add CSP

For now, we can slightly tighten the CSP for our extension, which doesn't need to reach out to touch anything.

After we add a webservice call, we'll need to exempt it via `connect-src`
ericlaw1979/ShowChromeVersion,ericlaw1979/ShowChromeVersion