feat: add Content-Security-Policy header and externalize theme-init #175

Job	Run time
mypy	18s
API integration tests + coverage (ubuntu-latest)	18s
Performance benchmarks (informational)	27s
ruff + pip-audit (windows-latest)	1m 59s
Frontend unit tests (vitest) (windows-latest)	46s
pytest (windows-latest)	1m 7s
Frontend unit tests (vitest) (macos-latest)	29s
pytest (macos-latest)	33s
ruff + pip-audit (ubuntu-latest)	21s
pytest (ubuntu-latest)	42s
API integration tests + coverage (macos-latest)	17s
Verify prod requirements.txt is sufficient	8s
Frontend unit tests (vitest) (ubuntu-latest)	18s
ruff + pip-audit (macos-latest)	24s
API integration tests + coverage (windows-latest)	55s
Frontend unit tests (vitest) (macos-latest)	31s
pytest (macos-latest)	33s
mypy	18s
ruff + pip-audit (windows-latest)	1m 59s
API integration tests + coverage (ubuntu-latest)	18s
ruff + pip-audit (macos-latest)	24s
API integration tests + coverage (macos-latest)	17s
Verify prod requirements.txt is sufficient	8s
Frontend unit tests (vitest) (windows-latest)	46s
Frontend unit tests (vitest) (ubuntu-latest)	18s
Performance benchmarks (informational)	27s
pytest (ubuntu-latest)	42s
ruff + pip-audit (ubuntu-latest)	21s
API integration tests + coverage (windows-latest)	55s
pytest (windows-latest)	1m 7s
	18m 6s

Provide feedback