Generating an nonce for Content Security Policy and all scripts – How to make it match/persist for each page load?

WP’s nonces aren’t true nonces as they are valid for about 24 hours. So, if you use the same string in wp_create_nonce( $action ) then WP will always generate the same nonce for a 24 hour period.