Fix observability usage quota API

What does this MR do and why?

• Fix observability usage quota API endpoint
• Add ::Observability::ContentSecurityPolicy to UsageQuotasController to allow API calls to Observability backend from the client

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

NA

How to set up and validate locally

Run rspec