Replace the disabled Tauri CSP with explicit local IPC and API connectivity while retaining only required asset and inline-style allowances.