Function setupContentSecurityPolicy

Set up Content Security Policy headers for the application. Production mode uses stricter CSP policies.