Aegis module: a Content-Security-Policy header for the site and Nova, edited per directive from Nova, with report-only mode, strict validation and a policy-strength check.