fix: CSP Security hole in tryConvertExpr (new Function(...))

[setvik]

Addresses the CSP security hole identified in the issue linked below and allow ClayGL to be used on sites with strict Content Security Policies:

Please make claygl CSP compatible when "script-src unsafe-eval" is used.