fix: sec patch

[mfshao]

Jira Ticket: PPS-154

Improvements

• Add CSP directives in response

Dependency updates

• Adpoted helmet
• Adpoted cors

Deployment changes

• This change will add some CSP and CORS related header to the response that returned from the dashboard services. They should not be interruptive, but each team is encouraged to double check their webpages hosted by dashboard to ensure they still works
• Because of these CSP directives being added, starting from this version, if anyone what to load remote scripts in their dashboard-hosted webpages, they will need to update the CSP directives in this dashboard service if the current directives doesn't fit, or to ship the script files with the page