BFF fetch (CSP connect-src probe)

Client-side fetch to https://api.dev.thegrimoire.shop/healthz. A 2xx proves the CSP connect-src allows the BFF; a CSP block proves it doesn't.

loading…