Thanks for reaching out. While not familiar with SRI setups here in Site Kit plugin support this seems to be a a security feature and not something that can be added via the plugin. From further checks it seems it may not as easily achievable using a CMS such as WordPress, with one recent track ticket closed on this topic. While I will check this with the team I don’t think this is something that can be achieved on the plugin side.
In relation to the “resources loaded over http” notice all Site Kit resources, including to Google services are requested over https. I therefore don’t expect these are Site Kit specific. For the non secure ads you mentioned I don’t see this when checking your site at present however the product experts at the AdSense Help Center should be able to assist with this. If you’re able to determine any specific not https ad you can also restrict ads or ad networks from being served at AdSense level.
While you may have further recommendations in relation to your website security do you encounter any errors or warnings when using the Site Kit plugin? I do see some browser console errors, although they don’t seem Site Kit specific.
As we didn’t receive a response I’ll mark this as resolved. Feel free to open a new support topic if you continue to encounter issues, or reopen this topic and we’d be happy to assist.