pub async fn inject_security_headers( config: SecurityHeadersConfig, request: Request, next: Next, ) -> Response