script hash rails integration PoC

Application demonstrating this: https://github.com/oreoshake/script_hash_test
Video demo: https://www.youtube.com/embed/Bc2hvziTRxg

Two pieces:
* Rake task to find all inline script, compute the script-hash value, store in config/script_hash.yml

AND 

* Contains new before_filter to subscribe to ActiveSupport::Notifications events (rendering partials/templates)
* All rendered templates write to an env value that contains all hashes for each rendered template/partial
* Middleware then (stupidly) does a find/replace or adds a directive containing the script hash values

Based on "simple" script hash proposal.
Need to verify hashed values with various methods.

This makes me think the before_filters should create a ContentSecurityPolicy object and build the entire header in the middleware.
Here we go: https://github.com/twitter/secureheaders/pull/109/files

Should it really be `sha1`? `sha256` works for me in Chrome 37.