A practical, copy-paste friendly guide to CSP, HSTS, XFO, and other headers — with safe starting values.