/* Dai Dia Ma — public pages (/privacy, /delete-account) CSP on these paths is: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' => no inline