Add section on inline JS with CSPs

[guardrex]

Fixes #34425

Thanks @jbaumflek! 🚀 ... I'll start with this, and I'll ask Steve to review it next week. Let's give him a second to get back into the swing of things now that we're all coming back from the holidays.

BTW ... Ignore my code-fencing activities on the DIFF. I noticed in passing that I didn't have the policy directive cross-link API code-fenced, and I decided to do that here to avoid having to create a new PR. Scroll down to the new Use of inline JavaScript with a CSP section.

I'll keep an 👂 open if you create a product unit issue to discuss this subject with engineering.

---

Internal previews

📄 File	🔗 Preview link
aspnetcore/blazor/javascript-interoperability/location-of-javascript.md	aspnetcore/blazor/javascript-interoperability/location-of-javascript
aspnetcore/blazor/security/content-security-policy.md	aspnetcore/blazor/security/content-security-policy
aspnetcore/security/authentication/customize-identity-model.md	aspnetcore/security/authentication/customize-identity-model

[guardrex]

cc: @tdykstra ...

https://github.com/dotnet/AspNetCore.Docs/blob/main/aspnetcore/security/authentication/customize-identity-model.md

The build report says ...

Invalid value for 'ms.author', 'avickers' is not a valid Microsoft alias.

[tdykstra]

cc: @tdykstra ...

https://github.com/dotnet/AspNetCore.Docs/blob/main/aspnetcore/security/authentication/customize-identity-model.md

The build report says ...

Invalid value for 'ms.author', 'avickers' is not a valid Microsoft alias.

Change ms.author to riande.