Fix CSP to allow ONNX runtime from jsdelivr CDN

- Add cdn.jsdelivr.net to script-src in CSP
- Add cdn.jsdelivr.net to host_permissions
- Fixes: "no available backend found" error from Transformers.js

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: vedantagarwal-web

manifest.json

@@ -15,10 +15,11 @@
     "https://huggingface.co/*",
     "https://cdn-lfs.huggingface.co/*",
     "https://cdn-lfs-us-1.huggingface.co/*",
-    "https://raw.githubusercontent.com/*"
+    "https://raw.githubusercontent.com/*",
+    "https://cdn.jsdelivr.net/*"
   ],
   "content_security_policy": {
-    "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'self';"
+    "extension_pages": "script-src 'self' 'wasm-unsafe-eval' https://cdn.jsdelivr.net; object-src 'self';"
   },
   "background": {
     "service_worker": "src/background/index.ts",