fix(@angular/build): Fixing auto-csp edge cases

[aaronshim]

• <script> is the last tag before close
• .appendChild is called before (because document.body is undefined then)
• <script> tags with a src attribute and no specified type attribute should not write <script type="undefined" ...>

PR Checklist

Please check to confirm your PR fulfills the following requirements:

• The commit message follows our guidelines: https://github.com/angular/angular-cli/blob/main/CONTRIBUTING.md#-commit-message-guidelines
• Tests for the changes have been added (for bug fixes / features)
• Docs have been added / updated (for bug fixes / features)

PR Type

What kind of change does this PR introduce?

• Bugfix
• Feature
• Code style update (formatting, local variables)
• Refactoring (no functional changes, no api changes)
• Build related changes
• CI related changes
• Documentation content changes
• Other... Please describe:

What is the current behavior?

Auto-CSP creates non-loading loader scripts

Issue Number: #29054

What is the new behavior?

Auto-CSP generates loading loader scripts

Does this PR introduce a breaking change?

• Yes
• No

Other information

[dgp1130]

Looks great, thanks!

[dgp1130]

The changes were merged into the following branches: main, 19.0.x

[angular-automatic-lock-bot]

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}