Add the `nonce` as a valid attibute for script loading

 **Is your feature request related to a problem? Please describe.**
On an app with CSP policy it is a good practice to provice `nonce` for 3rd party scripts (instead of allowing the entire cdn js sites, which exposes may expose to a XSS)

 **Describe the solution you'd like**
Add to  `ScriptItem` interface the `nonce` prop.
