[Runtime] Add CSP supporting for Crosswalk scheme

The CSP control will be enabled in packaged application by adding the
CSP content into the Crosswalk scheme response header.

This patch will enable the default CSP policy: "script-src 'self';
object-src 'self'", for each packaged application.

https://crosswalk-project.org/jira/browse/XWALK-630