3837a77d

By: Michael Lynch <git@mtlynch.io>

Respect s3config Subfolder and mediaBaseURL in CSP and importer

- Use s3cfg.KeyPath() for all S3 upload destinations in import-from-tinybeans
  so the configured subfolder prefix is applied to every uploaded file.
- Add the mediaBaseURL origin to the CSP img-src and media-src directives
  so the browser permits loading images and video from the S3 host.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Codeberg
configuredevShellbackendbackend-devcheck-bashcheck-frontendcheck-go-formattingcheck-go-test-packagescheck-trailing-newlinecheck-trailing-whitespacediagramdocker-imagee2e-testsgo-testsimport-from-tinybeanslint-sqllittle-momentslittle-moments-devx86_64-linux