fix "script-src 'unsafe-inline';" to re-enable client-side search via Javascript

The following link should take you to a page which contains the filtered search result for Telegram: https://f-droid.org/packages/#q=telegram

Instead it just lists all packages. It's working on the gitlab deployed site: https://fdroid.gitlab.io/fdroid-website/packages/#q=telegram

But also broken on the staging site: https://staging.f-droid.org/packages/#q=telegram