I can't take Rubocop any more. Moving up to Ruby 3 forces us to update RuboCop,
and it comes with dozens of linters that I'd have to evaluate, none of which is
a marginal improvement. I'm done having opinions.
* enforce content security policy (#711)
* allow connect-src from self, fixes#736
* enable unsafe_eval so that previewing story submission works
* turn back report only mode for now