bug: CSP - Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-elem …"

### Current Behavior

When you enable at least the following CSP header
```
Content-Security-Policy = 'default-src https://cdnjs.cloudflare.com/ajax/libs; style-src-elem https://cdnjs.cloudflare.com/ajax/libs'
```
browsers will refuse to apply inline styles (rightfully).

The exact error message:
```
p-ea7bbed1.system.js:1 Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-elem localhost […]". Either the 'unsafe-inline' keyword, a hash ('sha256-NBfyYgxoWTkJ9SyHWLNVIq8UkKGvsaGPAaGmNMpVMSA='), or a nonce ('nonce-...') is required to enable inline execution.
```

Problematic code (in the last line):
```js
{
$.innerHTML = n + v;
$.setAttribute("data-styles", "");
l.insertBefore($, o ? o.nextSibling : l.firstChild)
}
```
File: https://cdnjs.cloudflare.com/ajax/libs/ionicons/7.1.0/ionicons/p-ea7bbed1.system.js

### Expected Behavior

Styles applied normally from JS and not inline.

### Steps to Reproduce

Turn on the mentioned CSP headers.

### Code Reproduction URL

_No response_

### Additional Information

_No response_

Start by reproducing the issue with the stated Content-Security-Policy header and inspect ionicons/p-ea7bbed1.system.js, especially the final inline-style insertion shown in the report. Trace that generated code back to its TypeScript source; done means styles still apply normally without requiring inline-style execution under the CSP.

Vom Indexierungsmodell aus dem Issue-Text verfasst.