Fix CSP font-src to allow data: URIs (swiper.js base64 font) (#658)

* Fix CSP font-src to allow data: URIs for swiper.js base64 

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Author: Copilot

src/Web/Grand.Web.Common/Infrastructure/ApplicationBuilderExtensions.cs

@@ -222,7 +222,7 @@ public static void UseDefaultSecurityHeaders(this WebApplication application)
                 builder.AddUpgradeInsecureRequests();
                 builder.AddDefaultSrc().Self();
                 builder.AddConnectSrc().From("*");
-                builder.AddFontSrc().From("*");
+                builder.AddFontSrc().From("*").Data();
                 builder.AddFrameAncestors().From("*");
                 builder.AddFrameSrc().From("*");
                 builder.AddMediaSrc().From("*");