Header and footer modifications for new static pages

About npm, private npm, and security.
CSP changes to allow the HubSpot form on the private npm page.
Removing the old static /about route to allow it to fall through.