gruntfile: allow all images in the CSP

This is because GitHub keeps changing their CDN domain names.