fix(security): authorize site uploads and harden tokens, media and request identity

src/lib/csp.ts

@@ -12,7 +12,6 @@ export function buildContentSecurityPolicy(nonce: string): string {
 		"https://www.google.com/recaptcha/",
 		"https://www.gstatic.com/recaptcha/",
 		"https://static.cloudflareinsights.com",
-		"https://cdn.jsdelivr.net",
 		...(isDev ? ["'unsafe-eval'"] : []),
 	].join(" ");