88b09521

By: Michael Lynch <git@mtlynch.io>

Revert premature S3 changes to handlers/csp.go and routes.go

Remove the S3-aware CSP logic (dynamic media origin injection) and
method receiver on enforceContentSecurityPolicy; these belong in a
later commit when S3 support is wired up.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Suite timing

Time to Start Worker time Duration Time to finish
Config 0s 2s 2s 3s
Eval 3s 57s 57s 1m01s
Build 7s 5m41s 1m13s 1m21s
Test - - - -
Deploy - - - -
Suite 0s 6m42s 1m20s 1m21s

Timeline

0s10s20s30s40s50s1m1m10s1m20s