fix(web-app-fusiondirectory/csp): allow inline script-src-elem

FusionDirectory's breezy theme inlines a `<script>` block on the login
page to drive form validation. Without `'unsafe-inline'` in
script-src-elem, sys-ctl-hlth-csp reports
`[CSP DOM] Blocked URI: inline` on fd.infinito.example and aborts the
deploy in variants that disable the css/cdn injectors (variant 1+).

Verified in-container by hand-patching the rendered nginx vhost,
reloading nginx, and re-running hlth-csp: fd.infinito.example reports
`No CSP or network blocks detected`.

roles/web-app-fusiondirectory/meta/server.yml

@@ -3,6 +3,10 @@ domains:
   canonical:
     - fd.{{ DOMAIN_PRIMARY }}
   aliases: []
+csp:
+  flags:
+    script-src-elem:
+      unsafe-inline: true
 networks:
   local:
     subnet: 192.168.103.32/28