Permission needs to be obtained before adding exceptions to the CSP

The .htaccess file now uses the standard method for adding exceptions to the standard CSP, which is good.

However, there is no evidence that these exceptions have been allowed by Privacy.

https://github.com/apache/beam/blob/bdd042509b6efb938bc5285290a02a8e644e3cd5/website/www/site/static/.htaccess#L33

Please contact privacy@ to get permission.

Note that there are a couple of failing references to google-analytics - these are definitely not allowed, so the solution is to remove the references.