LinkTagHelper should not use inline scripts

[mkArtakMSFT]

As per security guidance we should make sure LinkTagHelper doesn't use inline-script.

Related issues: #11111 , #14104

[DamianEdwards]

We looked at this a long time back (I believe @SteveSandersonMS did some research) and concluded then that removing the current inline-script approach would likely break the feature, due to issues with loading order of the related resources (CSS and JavaScript files). It's worth another look to see if the current behavior can be maintained via another approach, but if it can't, we should consider different approaches to removing this, as it's potentially a very impactful breaking change, e.g. we could make the use of the related attributes on the effected Tag Helpers throw in 5.0 by default, and add an option to enable the behavior again. We could then remove them completely in 6.0.

[pranavkm]

Triage notes: We should figure out if this is possible at all. Also the current best practices is to avoid CDN for serving static content, so perhaps the work here is to obsolete the fallback feature.

[Atulin]

Maybe a bit of a tangential proposition, but perhaps instead of completely obsoleting the feature, have the CDN files be downloaded on build time and replace the fallback URLs?

Just a wild thought