th: config: CSP: add unsafe-eval for scripts th: config: CSP: allow unsafe-inline for CSS Rebased-by: kouhai <kouhai@treehouse.systems>