feat: Add secure_headers

Manages application of security headers with many safe defaults

Gemfile

@@ -50,3 +50,4 @@ gem 'pundit', '2.1.0'
 gem 'pundit-matchers', '1.6.0'
 gem 'nexus_domain_events', '1.1.2'
 gem 'batch-loader', '1.4.1'
+gem 'secure_headers', '6.3.3'

Gemfile.lock

@@ -75,8 +75,8 @@ GEM
     autoprefixer-rails (10.4.2.0)
       execjs (~> 2)
     aws-eventstream (1.2.0)
-    aws-partitions (1.564.0)
-    aws-sdk-core (3.129.0)
+    aws-partitions (1.568.0)
+    aws-sdk-core (3.130.0)
       aws-eventstream (~> 1, >= 1.0.2)
       aws-partitions (~> 1, >= 1.525.0)
       aws-sigv4 (~> 1.1)
@@ -107,7 +107,7 @@ GEM
     case_transform (0.2)
       activesupport
     chunky_png (1.4.0)
-    concurrent-ruby (1.1.9)
+    concurrent-ruby (1.1.10)
     crack (0.4.5)
       rexml
     crass (1.0.6)
@@ -170,7 +170,7 @@ GEM
       activesupport (>= 4)
       railties (>= 4)
       request_store (~> 1.0)
-    loofah (2.14.0)
+    loofah (2.15.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -319,6 +319,7 @@ GEM
       sprockets (> 3.0)
       sprockets-rails
       tilt
+    secure_headers (6.3.3)
     serverengine (2.1.1)
       sigdump (~> 0.2.2)
     set (1.0.2)
@@ -419,6 +420,7 @@ DEPENDENCIES
   rspec-rails (= 5.0.2)
   ruby-mailchecker (= 4.0.11)
   sass-rails (= 5.1.0)
+  secure_headers (= 6.3.3)
   shoulda-matchers (= 4.5.1)
   simplecov (= 0.21.2)
   sneakers (= 2.12.0)