fix(security): authorize site uploads and harden tokens, media and request identity

src/lib/csp.test.ts

@@ -16,6 +16,6 @@ describe("csp", () => {
 		expect(csp).toContain("style-src 'self' 'unsafe-inline'");
 		expect(csp).toContain("style-src-attr 'unsafe-inline'");
 		expect(csp).toContain("https://challenges.cloudflare.com");
-		expect(csp).toContain("https://cdn.jsdelivr.net");
+		expect(csp).not.toContain("https://cdn.jsdelivr.net");
 	});
 });