fix(security): add Subresource Integrity (SRI) to CDN script tags

Add sha384 integrity hash and crossorigin="anonymous" to all Typesense
JS CDN script tags across results, autocomplete, category listing,
and recommendations templates.

Fixes #7

Author: DavidLambauer

view/frontend/templates/category/typesense-listing.phtml

@@ -32,7 +32,7 @@ $config = $viewModel->getJsonConfig();
 $sortOptions = $viewModel->getSortOptions();
 ?>
 
-<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js" integrity="sha384-b1Uj2Udv6vFZ+nH6F6SaFpWpjpTqGXdfReSsqJhHUVr8yp2AehtZG/2EpA1dw0SN" crossorigin="anonymous"></script>
 <script>
     function initTypesenseCategorySearch() {
         const config = <?= /* @noEscape */ $config ?>;

view/frontend/templates/product/recommendations.phtml

@@ -35,7 +35,7 @@ $hyvaCsp = $viewModels->require(HyvaCsp::class);
 $config = $viewModel->getJsonConfig($product);
 ?>
 
-<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js" integrity="sha384-b1Uj2Udv6vFZ+nH6F6SaFpWpjpTqGXdfReSsqJhHUVr8yp2AehtZG/2EpA1dw0SN" crossorigin="anonymous"></script>
 <script>
     function initTypesenseRecommendations() {
         const config = <?= /* @noEscape */ $config ?>;

view/frontend/templates/search/autocomplete.phtml

@@ -29,7 +29,7 @@ $hyvaCsp = $viewModels->require(HyvaCsp::class);
 $config = $viewModel->getJsonConfig();
 ?>
 
-<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js" integrity="sha384-b1Uj2Udv6vFZ+nH6F6SaFpWpjpTqGXdfReSsqJhHUVr8yp2AehtZG/2EpA1dw0SN" crossorigin="anonymous"></script>
 <script>
     function initTypesenseAutocomplete() {
         const config = <?= /* @noEscape */ $config ?>;

view/frontend/templates/search/results.phtml

@@ -31,7 +31,7 @@ $config = $viewModel->getJsonConfig();
 $sortOptions = $viewModel->getSortOptions();
 ?>
 
-<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/typesense@1.8.2/dist/typesense.min.js" integrity="sha384-b1Uj2Udv6vFZ+nH6F6SaFpWpjpTqGXdfReSsqJhHUVr8yp2AehtZG/2EpA1dw0SN" crossorigin="anonymous"></script>
 <script>
     function initTypesenseInstantSearch() {
         const config = <?= /* @noEscape */ $config ?>;