fix: use current production CSP configuration

app/docs.test.ts

@@ -128,6 +128,10 @@ test("site includes core guides and production configuration", () => {
   expect(readFileSync(join(root, "wrnexus.config.ts"), "utf8")).toContain(
     "WRNexusJS Documentation",
   );
+  const config = readFileSync(join(root, "wrnexus.config.ts"), "utf8");
+  expect(config).toContain("contentSecurityPolicy:");
+  expect(config).not.toMatch(/^\s*csp:\s*\{/m);
+  expect(config).toContain('"connect-src": ["\'self\'", "https://fonts.gstatic.com"]');
 });
 
 test("language reference covers directives, events, loops, and conditionals", () => {

wrnexus.config.ts

@@ -35,7 +35,7 @@ const config: AppConfig = {
       referrerPolicy: "strict-origin-when-cross-origin",
       permissionsPolicy: "camera=(), microphone=(), geolocation=()",
     },
-    csp: {
+    contentSecurityPolicy: {
       enabled: true,
       directives: {
         "default-src": ["'self'"],