blogs: add CSP report header to blog sites

[timmywil]

Rather than making changes to the blog wordpress theme, I've added the CSP report header for the blogs sites via nginx and the blogs yaml. Once the blog uses jquery-wp-content as its theme, we can drop this.

Ref #54

[Krinkle]

root@2075a567596f:/infrastructure-puppet# octocatalog-diff --environment production -n wpblogs-01.ops.jquery.net
…
I, [2024-12-15T15:04:27.846751 #4039]  INFO -- : Catalogs compiled for wpblogs-01.ops.jquery.net
I, [2024-12-15T15:04:27.898928 #4039]  INFO -- : Diffs computed for wpblogs-01.ops.jquery.net
  File[/etc/nginx/sites-available/default-tls] =>
   parameters =>
     content =>
      @@ -17,4 +17,8 @@
         server_tokens off;
      _
      +  # Add Content Security Policy headers
      +  add_header Reporting-Endpoints "csp-endpoint='https://csp-report-api.openjs-foundation.workers.dev/'";
      +  add_header Content-Security-Policy-Report-Only "default-src 'self'; script-src 'self' code.jquery.com; report-uri https://csp-report-api.openjs-foundation.workers.dev/; report-to csp-endpoint" always;
      +
         location /.well-known/acme-challenge {
           root /var/www/letsencrypt/;
*******************************************
  Nginx::Site[default-tls] =>
   parameters =>
     content =>
      @@ -17,4 +17,8 @@
         server_tokens off;
      _
      +  # Add Content Security Policy headers
      +  add_header Reporting-Endpoints "csp-endpoint='https://csp-report-api.openjs-foundation.workers.dev/'";
      +  add_header Content-Security-Policy-Report-Only "default-src 'self'; script-src 'self' code.jquery.com; report-uri https://csp-report-api.openjs-foundation.workers.dev/; report-to csp-endpoint" always;
      +
         location /.well-known/acme-challenge {
           root /var/www/letsencrypt/;
*******************************************

[timmywil]

Indeed, that is the diff for blogs. And the diff for wp-04 and wp-05 is just an added newline.

root@12ca945fbadb:/infrastructure-puppet# octocatalog-diff --environment production -n wp-04.ops.jquery.net
I, [2024-12-15T15:42:53.162383 #3964]  INFO -- : Catalogs compiled for wp-04.ops.jquery.net
I, [2024-12-15T15:42:53.429824 #3964]  INFO -- : Diffs computed for wp-04.ops.jquery.net
  File[/etc/nginx/sites-available/default-tls] =>
   parameters =>
     content =>
      @@ -17,4 +17,5 @@
         server_tokens off;
      _
      +
         location /.well-known/acme-challenge {
           root /var/www/letsencrypt/;
*******************************************
  Nginx::Site[default-tls] =>
   parameters =>
     content =>
      @@ -17,4 +17,5 @@
         server_tokens off;
      _
      +
         location /.well-known/acme-challenge {
           root /var/www/letsencrypt/;
*******************************************