Add wasm-eval to CSP

[amaury1093]

Running wasm code inside chromium requires unsafe-eval, which we wish to avoid in Electron. There's a new spec call wasm-eval w3c/webappsec-csp#293 to specifically allow running wasm code.

Once that's inside Electron's chromium, we could add wasm-eval in our CSP