HTTP response headers from Azure Functions should align with OWASP best-practices

## Scope
This question applies to a Function App running on a Windows App Service Plan.

On AppServices, we're able to modify the `web.config` to update response headers to meet the [OWASP Secure Headers](https://owasp.org/www-project-secure-headers/) recommendations. This is a corporate policy, and violdating it includes penalties "up to and including termination". I doubt anyone would actually be fired for this, but...

Can we access the web.config file to do the same on Azure Functions?