Add the header X-Frame-Options DENY

Adding the `X-Frame-Options DENY` header should prevent [readthedocs.org](readthedocs.org) from being embedded in iFrames.

&mdash; @citruspi