Vendor Bulma CSS

[olivier-thatch]

Vendor Bulma's minified CSS directly in the gem.

If the app importing Audits1984 uses a Content Security Policy, it won't be able to import the stylesheet from https://cdn.jsdelivr.net without explicitly allowing it in the policy. Bundling the stylesheet with the app is a simple way to fix this issue.

(Arguably it's also better practice from a security standpoint for an auditing tool to avoid making any requests to third parties.)

The minified CSS is still 202KiB large, so if you think that's too large to include as part of the gem, I can instead submit a PR to customize the CSP specifically for Audits1984's controller actions. It wouldn't be too difficult to implement, but it'd be less user-friendly as it should probably be an opt-in flag (since you probably don't want to start tweaking the CSP in apps that don't have a CSP in the first place).

cc @jorgemanrubia @dhh

[jorgemanrubia]

I think vendoring the CSS makes sense @olivier-thatch, thank you