CSP Header Builder

Build a Content-Security-Policy header from per-directive sources, skipping empty ones and rejecting a blanket wildcard.