chore: add ngnix security headers

[Agastya18]

Description

This pull request for issue #939 updates the Nginx configuration to enhance security and allow communication with specific origins. The changes include:
Security Headers: Added headers to prevent MIME type sniffing, clickjacking, and XSS attacks.
Content Security Policy (CSP): Configured to restrict resources to specific trusted domains, including Google Analytics, Google Fonts, and hasadna.org.il.
CORS Configuration: Updated to allow cross-origin requests from specified domains.

screenshots

[github-actions]

Preview: https://s3.amazonaws.com/noam-gaash.co.il/12257336004/open-bus/211/index.html
Preview Storybook: https://s3.amazonaws.com/noam-gaash.co.il/12257336004/open-bus/211/storybook/index.html
Test Report (if available): 'https://s3.amazonaws.com/noam-gaash.co.il/12257336004/open-bus/f545c9cc6119c3ac4211a49c5a8b039d0e390cd4/test-results/index.html'

[NoamGaash]

Thanks!
But seems like the tests are failing when executed on the dockerized version:

https://eyes.applitools.com/app/test-results/00000251668441915811/?accountId=ClQJqzT0PkebrsewHfaQEQ__