Setup Content Security Policy header based on new handler

[dvesh3]

Feature description

Based on pimcore/pimcore#11447

Also add configuration to whitelist urls:

# config/config.yaml
pimcore_admin:
    admin_csp_header:
        additional_urls:
            script_src:
                - 'http://unpkg.com/axios/dist/'
                - 'http://unpkg.com/react/umd/'
                - 'http://unpkg.com/react-dom/umd/'
            style-src:
                - 'https://cdn.jsdelivr.net/npm/'

[aryaantony92]

The urls "//unpkg.com/axios/dist/", "//unpkg.com/react/umd/" and "//unpkg.com/react-dom/umd/" should be white listed inside the core bundle. And the "cdn.jsdelivr.net/npm/" is already whitelisted in the admin side.

[fashxp]

TODO:

• create PR that enables the config
• bump minimum requirement for pimcore to ^10.4