Add support for controlling frame-ancestors

This thread describes an error that you can get due to how frame-ancestors has been set in the code.

The fix for it is described here but this requires modifying the source code of the application.

Can this please be made into something that can be configured as an environment variable similar to how options like REDASH_CORS_ACCESS_CONTROL_ALLOW_ORIGIN can be modified via environment variable.