Start splitting up ContentSecurityPolicy.  WIP

This is total WIP on gh-6, just submitting PR to get feedback if on the right
track or not....

Still not done but split out a bunch so far.  Factorized with
.build instead of calling .new to get the right class.

I think the factory could further split the FF into 2 classes
for standard and non-standard, to further kill conditional checks
in the class.  Perhaps it should call a class method like .buildable?
on classes so it can roll through and pick the first that responds true.