[FIX] web : adding csp for automated scanner

Due to numerous client complaining about their automated scanner not
seeing the CSP header on the http request, we add it for good mesures

opw-2793379

closes odoo/odoo#121057

Signed-off-by: Vranckx Florian (flvr) <flvr@odoo.com>