fix($parse): add `.assign()` function to settable expressions in CSP mode

Also fixes the test suite, which was not actually taking CSP-mode paths when
we were expecting it to.

Numerous CSP-mode tests are failing, working on fixing these.
+1