Add CSP headers for doc.wikimedia.org

The domain hosts static assets generated from source code, namely
documentation. Add some Content-Security-Policy headers to restrict what
is accessible to browsers.

The Content-Security-Policy content has been proposed by @Bawolff and
would certainly cause some havoc here and there. But we get the reports
logged and would then be able to finely tune it for our purpose.

Since the header value is rather long, split it using backslashes, as
explained in Apache 2.4 configuration:
https://httpd.apache.org/docs/2.4/configuring.html#syntax

Hosts: doc1001.eqiad.wmnet

Bug: T213223
Change-Id: Iad6a4f52579c1f2b8b0f780b73b3bd1b7a29b0fc