Support for more / arbitrary content security policy directives

[gonzalob]

CSP gets directives added every now and then.
The one that brings me here specifically is require-trusted-types-for

Having the policy built around an arbitrary map of lists of strings gives users the flexibility to add whatever they need without changes to the theme itself.

[luizdepra]

I think it is possible to read the [params.csp] section and create each tag dynamically.

If anyone is interested in helping with this feature, please let me know.