fix(security): eliminate proxy/SSRF vulnerability and add comprehensi…

[SajanGhimire1]

…ve security headers

The previous next.config.ts contained unsafe rewrite rules that created an unauthenticated proxy/SSRF vulnerability:

// REMOVED - Security risk
rewrites: async function rewrites() {
  return [
    {
      source: '/api/:path*',
      destination: 'https://opensource.microsoft.com/api/:path*',
    },
    {
      source: '/avatars/:path*',
      destination: 'https://opensource.microsoft.com/avatars/:path*',
    },
  ]
}

[github-actions]

This PR has been identified as stale because it has gone 7 days with no activity.
The PR will be closed in 2 days. If this is incorrect, simply comment on the PR, or remove the stale label.

[jeffwilcox]

This only relates to local development, not deployed, however? I believe the hosting of this site is done by another system, this is only a static build based on a Next.js app.