Compatibility: integrity hashes not generated using Bedrock

Hi,

Currently Altis Browser Security doesn't generate integrity hashes for assets when using a [Bedrock](https://github.com/roots/bedrock) setup. It's checking `domain.com/wp` but most of them are in `domain.com/app/[..]` This is due the use of [`site_url()`](https://github.com/humanmade/altis-browser-security/blob/c169c7e77d300186e2351589fcd8ccd870a91b05/inc/namespace.php#L169-L177) instead of `home_url()`. Is this something you can change?

Further I noticed that WP Core assets don't get integrity hashes (non Bedrock too, I checked the source of humanmade.com to be sure). I think because the [paths are relative](https://github.com/WordPress/wordpress-develop/blob/65561851298cf189c139aed05a7fef7a869356e6/src/wp-includes/script-loader.php#L129). Is this intended?