add config def for report|enforce subtrees
solve all Eclipse warnings

Eclipse warns if a variable is defined but not used.
nelmio_security.csp_listener can have global scope

The listener does not depend on any other service or input that changes
with each request.
Make ContentSecurityPolicyListener an EventSubscriber
resolve yml validator warning in csp.yml