Update CSP for cookie banner

[hukho]

PR Classification

Security and code cleanup: strengthens CSP enforcement and removes legacy configuration code.

PR Summary

This pull request enforces stricter Content Security Policy (CSP) rules and improves script security across the application, while removing outdated pipeline configuration code.

• RequestConfigurationExtensions.cs: removed legacy request pipeline configuration extension.
• RequestPipelineConfigExtensions.cs: updated to apply strict CSP rules, including strict-dynamic for scripts and blocking object/base URIs; uses report-only mode in DEBUG.
• Razor view files (.cshtml): all script tags updated to include nws-csp-add-nonce="true" for automatic nonce generation and CSP compliance.
• _Layout.cshtml and _ValidationScriptsPartial.cshtml: external script references (e.g., Google Tag Manager, jQuery, Bootstrap) now include nonce attribute.
• CustomSecurityHeadersMiddleware.cs: minor refactoring for clarity.

[snyk-io-eu]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[JiviteshT]

Looks good