csp: ensure all policies include default-src#1745

alxndrsn merged 5 commits intogetodk:nextgetodk/central:nextfrom

alxndrsn:csp-default-default-srcalxndrsn/odk-central:csp-default-default-srcCopy head branch name to clipboard