security: tighten CSP and navigation guards #12

Job	Run time
desktop-tests (vault, npm run test:smoke -- --project=chromium --reporter=line -- tests/vault.spe...	7s
desktop-tests (ao, npm run test:smoke -- --project=chromium --reporter=line -- tests/ao.spec.ts)	7s
desktop-tests (smoke, npm run test:smoke -- --project=chromium --reporter=line -- tests/smoke.spe...	7s
	21s

Navigation Menu