Align the crawler and visitor headings, and send a report-only CSP

Page headings now consistent between crawler and visitor versions; Content Security Policy is now report-only for visibility.