Port #926 / #927 CSP fix to dev-2.6.0. - Extract 3 inline `<script>` blocks to `web/early-bootstrap.js` - Enables removal of `'unsafe-inline'` from CSP `script-src` Ref: linksys/LinksysWRT#352
Port #926 / #927 CSP fix to dev-2.6.0.
<script>blocks toweb/early-bootstrap.js'unsafe-inline'from CSPscript-srcRef: linksys/LinksysWRT#352