v0.9.1

Added

• An additional opt-in http header - both cant-be-evil: true and can't-be-evil: true are valid #16
• Support for blob: and data: protocols in the object-src and connect-src directives #15
• Removed the content security policy sandbox directive to improve compatibility with Blockstack Connect #25
• Build environment versions to verify that builds are reproducible for the Mozilla add-on review team #26