fix(csp): fix csp auto-detection and stylesheet injection

When we refactored , we broke the csp mode because the previous implementation
relied on the fact that it was ok to lazy initialize the .csp property, this
is not the case any more.

Besides, we need to know about csp mode during bootstrap and avoid injecting the
stylesheet when csp is active, so I refactored the code to fix both issues.

PR #4411 will follow up on this commit and add more improvements.

Closes #917
Closes #2963
Closes #4394
Closes #4444

BREAKING CHANGE: triggering ngCsp directive via `ng:csp` attribute is not
supported any more. Please use data-ng-csp instead.
revert(validate-commit-msg): fix incorrect comment

Revert 581ec6be7d7e546a1c563906e1877498d7d655a2 since it was not valid.

Closes #3952
docs(ngCsp): pretty-format docs
fix($httpbackend): ie11 api changes for jsonp

IE11 changed their script api and no longer uses onreadystatechange. It
now follows other browsers with onload and onerror

Fixes #4523