Add nonce (and strict-dynamic) support (PR #10364)

Very much a WIP

They use the built-in CSP API but do so manually. Calling the nonce generator and writing a value is probably not the way to go but hey, it works.

Code quality be damned.

GitHub

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Bah, meant to open on my forkā€¦