Move inline onclick handlers into external JavaScript

[gabriele-v]

Looks like inline event handlers are used: this is causing issue with strict Content Security Policies.
It's best practice to replace them with addEventListener and put Javascript in external js file.

[AlexCLeduc]

This is pretty low-priority for us. The effort is higher than you'd expect, a lot of HTMX swapping happens, we'd have to re-register events on new elements on every swap, or use event delegation (which is made complicated because we have some unwritten assumptions about how events bubble).

This won't happen until we have a more robust rewrite of the frontend, which is several months away at least

[gabriele-v]

Understood, unfortunately I can't chage our CSP policy to allow inlines.