[TAI-01-011] Enforce CSPs

The CSP is currently set to report only, but should be switched to enforcing.

@N-Pex We will need to coordinate on this to ensure that weblite doesn't break.