Bootstrap cdn.segment.com to default CSP configuration

The default CSP policy is blocking some tracking code in the CMS. This error shows up in the browser console:

Content Security Policy: The page's settings blocked the loading of a resource at http://cdn.segment.com/analytics.js/v1/4EIM9QDTm7iYX00nN45ve7VguRGgq1DS/analytics.min.js ("script-src").

The fix for this should to add cdn.segment.com to the script-src property below /hippo:configuration/hippo:modules/application-settings/hippo:moduleconfig/content-security-policy, but this domain should be bootstrapped in the CSP configuration.