Turnstile and OTS update

astro.config.mjs

@@ -52,6 +52,16 @@ export default defineConfig({
 
   vite: {
     plugins: [tailwindcss()],
+    build: {
+      // Never inline assets as data URIs. The default (4096 bytes) causes Vite
+      // to inline the smallest font subsets (e.g. cyrillic-ext woff2) as
+      // data:font/woff2 base64, which (a) requires data: in font-src and (b)
+      // triggers Chromium "OTS parsing error: Size of decompressed WOFF 2.0 is
+      // less than compressed size" warnings on those inlined subsets. Forcing
+      // every asset to a real file keeps font-src tight at 'self' and avoids
+      // the OTS parse errors.
+      assetsInlineLimit: 0,
+    },
   },
 
   server: {