fix($parse): add `.assign()` function to settable expressions in CSP mode

Also fixes the test suite, which was not actually taking CSP-mode paths when
we were expecting it to.

Numerous CSP-mode tests are failing, working on fixing these.
This could just be

```js
$delegate.csp = cspEnabled;
```

No?