docs: decorate HTTP header names

Author: kenjis

user_guide_src/source/outgoing/response.rst

@@ -147,9 +147,9 @@ When enabled, the response object will contain an instance of ``CodeIgniter\HTTP
 values set in **app/Config/ContentSecurityPolicy.php** are applied to that instance, and if no changes are
 needed during runtime, then the correctly formatted header is sent and you're all done.
 
-With CSP enabled, two header lines are added to the HTTP response: a Content-Security-Policy header, with
+With CSP enabled, two header lines are added to the HTTP response: a **Content-Security-Policy** header, with
 policies identifying content types or origins that are explicitly allowed for different
-contexts, and a Content-Security-Policy-Report-Only header, which identifies content types
+contexts, and a **Content-Security-Policy-Report-Only** header, which identifies content types
 or origins that will be allowed but which will also be reported to the destination
 of your choice.