[project] updated content security policy

allow "unsafe-inline" for style, this fixes issue with cursor
when dragging a panel on the options page
[project] use glob in web accessible resources