Add DSL for configuring Content-Security-Policy header

The def with blank `()` was newly added in #31176, but we have not used
the blank `()` style in most part of our code base.
So I've enabled `Style/DefWithParentheses` to prevent to newly added the
code.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy

Use Puma 3.11 in newly generated applications

In order to use early hints, need to use Puma 3.11.0 or higher.
So, I think that should specify that version in newly generated applications.

Ref: https://github.com/puma/puma/commit/f6f3892f4d82638fb7a2a57d993641b1486ee88a

Clean database naming ambiguity

Add new error class `QueryCanceled` which will be raised when canceling statement due to user request (#31235)

This changes `StatementTimeout` to `QueryCanceled` for PostgreSQL.

In MySQL, errno 1317 (`ER_QUERY_INTERRUPTED`) is only used when the
query is manually cancelled.

But in PostgreSQL, `QUERY_CANCELED` error code (57014) which is used
`StatementTimeout` is also used when the both case. And, we can not tell
which reason happened.

So I decided to introduce new error class `QueryCanceled` closer to the
error code name.

Since #31129, new error class `StatementTimeout` has been added.
`TransactionTimeout` is caused by the timeout shorter than
`StatementTimeout`, but its name is too generic. I think that it should
be a name that understands the difference with `StatementTimeout`.

Remove field ids from scaffold form

This reverts commit 0f79ab91, reversing
changes made to d575f7f2.

This PR philosophically conflicts with #30800 and Matthew thinks we
should hold off merging this until we find concensus. Reverting since
we're about to cut a release for 5.2.

In some places this file referred to the database in three different ways: database, DB and db. The last one caused confusion with the db namespace and the db folder. This commit removes this ambiguity by using the whole word 'database' everywhere

This reverts commit 536d3068.

Flush idle database connections

minor Engines guide copyedits: neutral language,  verb tense, comma splice [ci skip]

This was added with 27f103fc for link labels and fields.
However, `form_with` changed to generates ids by default with d3893ec3.
So I think that adding an explicit ids is unnecessary.

When load `5.1` config, `form_with_generates_remote_forms` is set.
https://github.com/rails/rails/blob/89a209f1abba5a2320d31c4898dea150c0abd0c0/railties/lib/rails/application/configuration.rb#L86

Provide arguments to RecordNotFound

Fix names of http authentication modules in api only guides

form_with_generates_ids

Own style guide says we should be using parentheses for method calls
with arguments.

Allow skip_default_ids option to be set in form_with

Improved logging of AJ's DelayedJob wrapper

When the defaults being loaded are the 5.0 or 5.1 we disable generation
of ids with form_with.

When `form_with` was introduced we disabled the automatic
generation of ids that was enabled in `form_for`. This usually
is not an good idea since labels don't work when the input
doesn't have an id and it made harder to test with Capybara.

You can still disable the automatic generation of ids setting
`config.action_view.form_with_generates_ids` to `false.`

Even that collisions are unlikely we need to make sure the two strings
are equal.

Timing is not important in this case because this only runs after the
comparison between the SHA256 digested strings returns true.

Make variable_size_secure_compare public

Add :nodoc: to activerecord [ci skip]

Ordinal methods should respect loaded records

Update guide layout [ci skip]

* [ci skip] SecureRandom should mentioned Win32 CryptoAPI functions instead of Win32

* Remove functions word