fix: add CSP hashes for inline styles from Google Fonts/Tailwind

src/lib/csp.ts

@@ -20,6 +20,11 @@ export function buildContentSecurityPolicy(nonce: string): string {
 		"'self'",
 		`'nonce-${nonce}'`,
 		"https://fonts.googleapis.com",
+		"'sha256-Kj92o2EIJOPxE06VhJbN8NBhB0Nq5lhNV8aXMMLf5fQ='",
+		"'sha256-NwXHG+Ak6jw1mAqOvXUBP4wBN4kCG04iIIqq24r5gqY='",
+		"'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='",
+		"'sha256-CIxDM5jnsGiKqXs2v7NKCY5MzdR9gu6TtiMJrDw29AY='",
+		"'sha256-599zOKM2ViWVJC0ovicF5YwQ3sRN4OtbjneHwKvkzkY='",
 		...(isDev ? ["'unsafe-inline'"] : []),
 	].join(" ");