make build.sh work, introduce docker image for building without local dependencies, introduce CSP

[nikosch86]

This PR fixes #30 and introduces docker as well as a (not very complete or very safe, but better than nothing) Content Security Policy