Allow HTTPS post media in the content security policy and cover it with a regression test.

Hop-State: A_06FPCZJEV5F0C6SP72N2X2G
Hop-Proposal: R_06FPCZHS36HMS1FP567XKN0
Hop-Task: T_06FPCYDXSZGDJRD738J0TJ8
Hop-Attempt: AT_06FPCYDXSZG4P47QJD8GHJG

src/lib/security/content-security-policy.test.ts

@@ -0,0 +1,8 @@
+import { describe, expect, it } from 'vitest';
+import { contentSecurityPolicy } from '../../../next.config';
+
+describe('content security policy', () => {
+  it('allows HTTPS media served by connected storage providers', () => {
+    expect(contentSecurityPolicy).toContain("media-src 'self' blob: https:");
+  });
+});