Make settings consistent over different web repos

[SaptakS]

• [x] Remove the HSTS settings, other apps leave this to the TLS termination level
• [x] base.py should default DEBUG to False so that we can reason about it in the same way as other apps
• [x] Stub out CSP variables in the same manner as SDO so that we can use them later
• [x] Simply the process of adding whitenoise to middleware (follow SDO and PFT, instead of complex calculating-an-index logic)
• [x] Instead of DJANGO_LOG_CONSOLE and DJANGO_LOG_PATH, just log to console if a log path is not set. Don't require DJANGO_LOG_JSON, default it appropriately.
• [x] Treat env vars that should be "booleans" the same everywhere.

[maeve-fpf]

Thanks @SaptakS! I've added:

• Simplified JSON logging to check that box
• a python-json-logging upgrade for the above
• Other misc dependency updates (base images also)
• Database environment config

[maeve-fpf]

Thank you! It should not be too complicated to use the plain text formatter in dev again (I didn't want to add more complexity with other things to review), but I'd like to get these deployed first if possible.

[chigby]

Got it. I'll merge when CI finishes.