Output only one nonce in CSP header per request
#32602

Envek wants to merge Envek:fix/csp-multiple-nonces into rails:master

We do not currently have an analysis of these two commits