feat(csp): create hashes of tracked scripts and hashes

[ematipico]

Changes

This PR updates Astro to use the information we already have of scripts and styles to create hashes and render them in the emitted HTML page.

This PR focus only SSG for now, I will follow up with another PR to implement the same logic for SSR.

• SSRManifest has been extended to track new information, such as hashes coming from scripts and styles. I prefer to keep them separated because we handle them differently throughout the code base.
• SSRResult has been extended to pass the hashes during the rendering phase. As for now, these hashes are always injected. I will change that later, and inject them only for static outputs. I need to find a way to test the static output with predictable hashes.
• ASTRO_STYLES has been moved into a separate file, so I could add a better warning about its value. The script prebuild.js has been updated to track the hash of the styles of astro islands
• The hashes of the astro island scripts are now compiled into a TS file, and it's imported when creating the manifest (they aren't used yet)

At the moment, the hashes of scripts and styles aren't grouped by page, but I believe we can achieve that.

Testing

I created a test for SSG, where we verify that the hashes we have in the manifest are the same of the one rendered in the final HTML file.

Docs

N/A

[changeset-bot]

⚠️ No Changeset found

Latest commit: 320d9b3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR