[Bug] RTL plugin remote load disable for content security policy

[exrhizo]

@kepler.gl/components 3.0.0-alpha.1

Auto loads a remote script: mapbox-gl-rtl-text.js in react-map-gl.
see: RTLTextPlugin

Expected behavior
Allow library users to disable remote script downloads.

Reference to Issue in react-map-gl here

[exrhizo]

Similarly, it's not clear to me why these:

export const KEPLER_UNFOLDED_BUCKET = 'https://studio-public-data.foursquare.com/statics/keplergl';
https://studio-public-data.foursquare.com/statics/keplergl/icons/svg-icons.json

aren't bundled into the app.