Add CSP support

[frolic]

With the recent Solana dep chain exploit, thinking it’s important to have some sane security defaults. Not sure CSP will help in the context of extension-based wallets but it certainly can’t hurt to minimize attack surface area.

see also #44