Removed unsafe-inline and unsafe-eval

[snipe]

This removes the unsafe-inline and unsafe-eval CSP options. I think we had to use those because of vue, but since we don't use vue anymore, we can tighten those down a bit.

[what-the-diff]

PR Summary

• Enhanced Security Policy Updates
  The Content Security Policy (CSP), a key player protecting our website from certain cyber threats, has been updated. Specifically, potentially risky values termed 'unsafe-inline' and 'unsafe-eval' were removed from the styling and scripting sections. We also introduced two extra sections: default-src and connect-src to the policy array, fortifying our security measures. These changes reside within the SecurityHeaders.php that is present in the app/Http/Middleware directory.