Re-evaulate best practices for dialogs

[MRayermannMSFT]

## Tasks
- [ ] Reconfirm that our Content-Security-Policy is most restrictive as possible, and that all dialogs use the policy if possible
- [ ] Determine where `script` elements are best declared (in `head`, start of `body`, end of `body`)
- [ ] Determine if `script` elements to load index fields are best done as a `script` element with a `src` attribute, or with an inline script that calls `require`.
- [ ] Dialog ID formats