♻️ refactor(middleware): remove duplicate CSP header assignment (#20548)

web/middleware.ts

     contentSecurityPolicyHeaderValue,
   )
 
-  response.headers.set(
-    'Content-Security-Policy',
-    contentSecurityPolicyHeaderValue,
-  )
-
   return wrapResponseWithXFrameOptions(response, pathname)
 }