Move script tag out of embedded check, for onetrust

[kokonakajima]

Adds the GDPR/OneTrust script to all pages that pull in the _head partial.

This doesn't affect the social share pages or customizer:

• https://github.com/nprapps/elections20-interactive/blob/master/src/_office_social.html
• https://github.com/nprapps/elections20-interactive/blob/master/src/_state_social.html
• https://github.com/nprapps/elections20-interactive/blob/master/src/customizer.html