This leverages an existing helper we had to set defer attributes
everywhere and adds nonce to all script tags regardless of if the
script is inline or external.

It also removes all the now-redundant nonce: true used in various
places.