Add the `nonce` as a valid attibute for script loading

[felixmosh]

Is your feature request related to a problem? Please describe. On an app with CSP policy it is a good practice to provice nonce for 3rd party scripts (instead of allowing the entire cdn js sites, which exposes may expose to a XSS)

Describe the solution you'd like Add to ScriptItem interface the nonce prop.