Add nonce handling from CSP in pages router (#78936)
Our docs never called out that the nonce from a
`content-security-policy` header would only automatically be set in app
router. This adds handling to ensure it is also set for pages router.
Fixes #67042
Closes NEXT-4104