qa twin of #515 — chore(launch-hygiene): CSP inline-script hashes + npm ci
- fix(csp): pin the identity-prefetch inline script hash and re-pin the drifted EmptyRanges shim (PF-3 was CSP-blocked everywhere)
- build(docker): install the SPA deps with
npm ci, notnpm install— builds were not lock-exact - Merge pull request #518 from tpromni/chore/launch-hygiene-csp-hash-npm-ci-qa
Source: tpromni/coach-pulse-consumer-ui → qa