Refactor build and CSP headers for Safari compat (#1442)

* add unsafe-inline directive to style-src

* debugging - turn on csp reporting

* revert reporting only csp

* do not inline JS and CSS in build

* enable HTTPs only when in production mode

* remove debug printf

* fix clean target

* revert force_https removal

client/package.json

@@ -68,6 +68,7 @@
     "babel-preset-modern-browsers": "^14.2.1",
     "chalk": "^4.0.0",
     "cheerio": "^1.0.0-rc.3",
+    "clean-css": "^4.2.3",
     "clean-webpack-plugin": "^3.0.0",
     "codecov": "^3.6.5",
     "connect-history-api-fallback": "^1.6.0",
@@ -92,11 +93,13 @@
     "jest-puppeteer": "^4.4.0",
     "json-loader": "^0.5.7",
     "mini-css-extract-plugin": "^0.9.0",
+    "optimize-css-assets-webpack-plugin": "^5.0.3",
     "puppeteer": "^2.1.1",
     "rimraf": "^3.0.2",
     "serve-favicon": "^2.5.0",
     "style-loader": "^1.1.3",
     "sw-precache-webpack-plugin": "^1.0.0",
+    "terser-webpack-plugin": "^2.3.6",
     "url-loader": "^4.0.0",
     "webpack": "^4.42.1",
     "webpack-cli": "^3.3.11",