fix: don't inline css in csp mode.

Also add `angular-csp.css` to the resulting build.
chore(Grunt): use the latest Content-Security-Policy header in csp mode