audit Run 15 Phase 5: CSP script-src drops 'unsafe-inline'
v0.6.9: UX audit charter decisions + sr-only file inputs
v0.6.5: UX audit consolidation + inline-style sweep + founder pricing