Provide nonce integration with CSP module

First pass, needs a bit of cleanup. Seems to work, needs tests and scrutiny.

In practice we have snippets that combine <script>, <style> and <link> tags in the same snippet, so unfortunately the original approach of adding a checkbox doesn't work. Have updated the approach to provide a separate field for entering the javascript, and repurposed the existing field for supporting markup.