Header and footer modifications for new static pages

This builds on top of the changes in https://github.com/npm/newww/pull/261

About npm, private npm, and security.
CSP changes to allow the HubSpot form on the private npm page.
Removing the old static /about route to allow it to fall through.