can't find a way to do this.
did find this article by Fortinet security team which you might use to show that it is not needed (assuming the original requirement comes from a security review):
https://community.fortinet.com/t5/FortiGate/PSIRT-Note-X-Content-Type-Options-HTTP-Header-missing-on-port/ta-p/193545
