Wait! You don’t need to implement CSP in development, you are not at risk from attackers?
It will also block some developer tools potentially.
Just turn this setting OFF:
Simples.
I would delay this headache until you have a working plugin testing on a production staging server.
