Do a join on CSP if $src is array

Allows for better syntax when writing csp.json
Make src list for CSP an array where multiple are set

Also, simplify many URLs where possible
Fix a few directives

No trailing commas, and data: should end with a colon and not have
quotes