Load the Javascript inline to prevent to HTTP Public Key Pin issues

Problem/Motivation

Error message shown is Public-Key-Pins: The site specified a header that could not be parsed successfully

Proposed resolution

Use inline JS instead of using a new script element via JavaScript to prevent this security issue.

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet