Automated response: google-analytics.com not on list of trusted CSP sites

google-analytics.com needs to be added to the list of trusted CSP sites when Google Analytics is active. Otherwise, the script gets blocked.

This was because it was only being added by the google_analytics non-bundled addon when it needed to be added within core Composr when the web property ID is provided.

CAUTION! If you have the google_analytics non-bundled addon, you must update it with the proceeding commit after applying this hotfix.