use alternate build of Alpine JS that doesn't violate "unsafe-eval"

[GreatBahram]

Hi there,

I noticed that the current version of Alpine.js bundled in the source code does not comply with CSP principles. However, this page suggests an alternative version of Alpine.js that adheres to CSP rules.

[ahmedaljawahiry]

Interesting, thanks for raising this.

Don't see a reason to not use the CSP build, but hard to say how much work is required without digging further. This will probably be a good one to do alongside an Alpine upgrade at some point - I'll raise an issue for that.