Security header check

HSTS, CSP, XFO, XCTO, Referrer-Policy, Permissions-Policy, COOP / COEP / CORP — graded against the modern baseline.