chore(rsc): fix csp example for Vite server ping SharedWorker

[hi-ogawa]

Description

Without this, Vite's SharedWorker get blocked by:

Refused to create a worker from 'blob:http://localhost:5173/4600b782-fd0b-4ee7-b8f6-9e0e1156c691' because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-d6241950-ac41-4fff-b52b-6948b203bfbe' 'unsafe-eval'". Note that 'worker-src' was not explicitly set, so 'script-src' is used as a fallback.

client:938 Uncaught (in promise) SecurityError: Failed to construct 'SharedWorker': Access to the script at 'blob:http://localhost:5173/4600b782-fd0b-4ee7-b8f6-9e0e1156c691' is denied by the document's Content Security Policy.
    at waitForSuccessfulPing (client:938:23)
    at handleMessage (client:869:12)