Fix Content-Security-Policy issues by including all files from the local instance

[bitte-ein-bit]

Hey,

this is a quick and dirty fix for not passing my Content-Security-Policy. Also I'd prefer if things stay local so I'm not dependant of functional internet.

I'm pretty sure there are better ways like webpack and a dist folder, but that's not my area of expertise.

Feel free to ignore in favour of an issue.