Remove inline handlers in cart, payment account page

[rtalvarez]

What?

Per PCI, inline event handlers like onload, onclick, onsubmit, etc, are forbidden for security reasons. Instead of doing this, we should attach the relevant handlers via a trusted script (protected by nonce)

This PR removes the following inline event handlers in order to comply with PCI since they are executed on pages that fall under PCI compliance (the Cart page and the Payments Account page)

• Gift wrapping remove anchor tag fires a confirm dialog that is currently handled inline. I've switched this to an event listener instead through cart.js, which is already protected by nonce
• The quick search functionality has an inline event handler that is safe to remove.
• The main bundle event handler has been removed. I've switched this to an event listener instead and protected it via nonce

Requirements

• CHANGELOG.md entry added (required for code changes only)

Screenshots (if appropriate)

Cart Gift Wrapping Option Testing

Confirm dialog pops up

After confirm, page is reloaded and message appears

---

Quick search

Search correctly previews results

Search works after pressing enter

---

Main Bundle

The relevant handler for the bundle is attached and executed correctly