Move inline scripts into their separate files

in order to remove the CSP header script-src 'unsafe-inline', we move the inline scripts into their separate files since the webpack'd JS files are static, we have to feed the matomo config values into the scripts via the DOM, similar to how it's done in the deposit form in invenio-app-rdm

unfortunately, the CK Editor (used in the deposit form) still requires style-src 'unsafe-inline' in its currently used form according to the documentation (https://ckeditor.com/docs/ckeditor5/latest/builds/guides/integration/csp.html), this could be remedied by changing the build process