chore(security): use nelmio/security-bundle (CSP, ...)

• https://symfony.com/bundles/NelmioSecurityBundle/current/index.html
• https://github.com/nelmio/NelmioSecurityBundle