Serve static asset from an API Gateway endpoint

[max-ostapenko]

This pull request migrates all static asset and report data URLs from the legacy CDN (cdn.httparchive.org) to a new Google Cloud Gateway endpoint (reports-prod-2vzgiib6.uc.gateway.dev). This affects JavaScript, HTML templates, server configuration, and testing scripts to ensure all references and tests now use the new endpoint. Additionally, the Content Security Policy is updated to allow requests to the new domains.

Key changes include:

Migration of asset and data URLs to new endpoint:

• All references to icon and report JSON URLs in frontend JavaScript files (such as histogram.js, timeseries.js, techreport/combobox.js, techreport/tableLinked.js, and drilldownHeader.js) now use the new Google Cloud Gateway endpoint instead of the old CDN.
• The HTML template (report.html) preconnects to the new endpoint for improved performance.

Testing and configuration updates:

• The shell script for testing report URLs (test_reports.sh) is updated to test against the new endpoint for both monthly and timeseries reports.
• The last_updated.json config file is updated to reflect new hashes and modification dates for affected JavaScript assets.

Security policy update:

• The Content Security Policy in server/csp.py is updated to allow requests to both the production and development Google Cloud Gateway endpoints.

[Copilot]

Pull request overview

This PR migrates static asset and report data URLs from the legacy CDN (cdn.httparchive.org) to a new Google Cloud Gateway endpoint (reports-prod-2vzgiib6.uc.gateway.dev). The migration ensures all frontend code, tests, and security policies reference the new endpoint.

Key changes:

• Updated all JavaScript files to fetch report data and icons from the new Google Cloud Gateway endpoint
• Modified Content Security Policy to allow requests to both development and production gateway endpoints
• Updated test scripts to validate report availability on the new endpoint

Reviewed changes

Copilot reviewed 9 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
tools/scripts/test_reports.sh	Updated test URLs to validate reports on the new gateway endpoint for monthly, timeseries, and CrUX reports
templates/report/report.html	Changed preconnect link to new gateway endpoint for performance optimization
src/js/timeseries.js	Migrated timeseries report data URL to new gateway endpoint
src/js/histogram.js	Updated histogram report data URL to new gateway endpoint
src/js/techreport/tableLinked.js	Changed icon URL reference to new gateway endpoint
src/js/techreport/combobox.js	Updated icon URLs in dropdown options to new gateway endpoint
src/js/components/drilldownHeader.js	Modified icon URL for drilldown header to new gateway endpoint
server/csp.py	Added both dev and prod gateway endpoints to Content Security Policy for script-src and connect-src directives
package-lock.json	Added "peer": true flags to various packages (appears unrelated to main PR purpose)
config/last_updated.json	Updated modification dates and hashes for affected JavaScript files

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.