Add nonce to javascipt tag to support strict content security policies

[murraybo]

In our project we are using a strict content security policy (CSP). This includes a script-src with nonce.

Therefore all scripts include inside a page need to use this nonce on their tag.

Rails has build in support for this, but it needs to be used.

This pull request adds nonce: true to javascript_include_tag . If no CSP is configure this does not have any effect.

[murraybo]

The failed CI run looks unrelated to the change. Maybe something with the workflow definition, or maybe a rerun can help.

[kirillplatonov]

Yeah, it seems to be a global Github Actions issue today. I will restart it

[kirillplatonov]

Thank you for the contribution! 🙌

[murraybo]

Thank you for the fast merge and for your tool. It make my life easier every day. :-)