✨ feat(sécurité): Améliore la configuration CSP et Permissions-Policy pour plus de contrôle.

ansible/templates/caddy.j2

@@ -13,7 +13,6 @@ intranet.ludikevent.fr, signature.ludikevent.fr {
     # --- BLOC HEADER AVEC CSP ---
     header {
         X-Robots-Tag "noindex, nofollow, nosnippet, noarchive"
-        Permissions-Policy "accelerometer=(), autoplay=(), camera=(), clipboard-write=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), usb=(), vr=(), screen-wake-lock=(), xr-spatial-tracking=(), bluetooth=(), ambient-light-sensor=(), battery=(), gamepad=(), notifications=(), push=()"
         X-Content-Type-Options "nosniff"
         X-Frame-Options "DENY"
         Referrer-Policy "strict-origin-when-cross-origin"