chore: futher CSP updates

vercel.json

@@ -17,7 +17,7 @@
 			"headers": [
 				{
 					"key": "Content-Security-Policy",
-					"value": "base-uri 'self'; font-src 'self' data: https://*.resurse.dev https://assets.vercel.com; form-action 'self' https://resurse.dev https://*.resurse.dev; frame-ancestors 'self' https://*.resurse.dev; img-src 'self' https: data: https://*.resurse.dev; media-src 'self' https: data: https://*.resurse.dev https://*.youtube.com https://*.youtube-nocookie.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https://*.resurse.dev https://resurse.dev 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://eu.i.posthog.com https://*.posthog.com https://mir.aculo.us https://*.resurse.dev https://*.simpleanalyticscdn.com/ https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://vercel.live https://cdn.vercel-insights.com https://va.vercel-scripts.com https://*.sentry.com https://*.sentry-cdn.com https://*.usefathom.com; upgrade-insecure-requests; default-src 'self' https://*.resurse.dev; worker-src 'self' blob:; connect-src 'self' ws: wss: https://*.resurse.dev https://*.simpleanalyticscdn.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googletagmanager.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://adservice.google.com https://www.google.co.in https://www.google.com https://www.google.id https://www.google.com.br https://www.google.co.uk https://www.google.ca https://www.google.com.au https://www.google.ro https://vitals.vercel-insights.com https://vitals.vercel-analytics.com https://vercel.live https://*.sentry.io https://*.usefathom.com; frame-src 'self' https://*.resurse.dev https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://td.doubleclick.net https://vars.hotjar.com https://vercel.live https://*.linkedin.com; report-uri https://o4506599007911936.ingest.sentry.io/api/4506661195808768/security/?sentry_key=344f761c5efeb4b9ea6b08942c01f5b6&sentry_environment=production;"
+					"value": "base-uri 'self'; font-src 'self' data: https://*.resurse.dev https://assets.vercel.com; form-action 'self' https://resurse.dev https://*.resurse.dev; frame-ancestors 'self' https://*.resurse.dev; img-src 'self' https: data: https://*.resurse.dev; media-src 'self' https: data: https://*.resurse.dev https://*.youtube.com https://*.youtube-nocookie.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https://*.resurse.dev https://resurse.dev 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://eu.i.posthog.com https://*.posthog.com https://mir.aculo.us https://*.resurse.dev https://*.simpleanalyticscdn.com/ https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://vercel.live https://cdn.vercel-insights.com https://va.vercel-scripts.com https://*.sentry.com https://*.sentry-cdn.com https://*.usefathom.com; upgrade-insecure-requests; default-src 'self' https://*.resurse.dev; worker-src 'self' blob:; connect-src 'self' ws: wss: https://eu.i.posthog.com https://*.posthog.com https://*.resurse.dev https://*.simpleanalyticscdn.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googletagmanager.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://adservice.google.com https://www.google.co.in https://www.google.com https://www.google.id https://www.google.com.br https://www.google.co.uk https://www.google.ca https://www.google.com.au https://www.google.ro https://vitals.vercel-insights.com https://vitals.vercel-analytics.com https://vercel.live https://*.sentry.io https://*.usefathom.com; frame-src 'self' https://*.resurse.dev https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://td.doubleclick.net https://vars.hotjar.com https://vercel.live https://*.linkedin.com; report-uri https://o4506599007911936.ingest.sentry.io/api/4506661195808768/security/?sentry_key=344f761c5efeb4b9ea6b08942c01f5b6&sentry_environment=production;"
 				},
 				{
 					"key": "Permissions-Policy",