feat: Restrict connect-src to trusted Hive API nodes in nonce CSP

Same restriction as Phase 2 - whitelist trusted API nodes:
- https://api.hive.blog
- https://api.syncad.com
- https://api.openhive.network
- https://images.hive.blog