web: enforce per-app _meta.ui.csp + surface resource-read failures#1652

cliffhall wants to merge 4 commits into

v2/1565-sandbox-hardeningmodelcontextprotocol/inspector:v2/1565-sandbox-hardeningfrom

v2/1566-per-app-cspmodelcontextprotocol/inspector:v2/1566-per-app-cspCopy head branch name to clipboard