security: Implement Content Security Policy in manifest.json

[SujalTripathi]

Description

No Content Security Policy (CSP) is defined in the extension.
This leaves it vulnerable to script injection attacks.

Requirements

• Add strict CSP to manifest.json
• Allow only necessary external connections
  (api.groq.com, generativelanguage.googleapis.com,
  api.openai.com)
• Block inline scripts where possible
• Test extension still works after CSP applied
• Document CSP decisions in comments

Acceptance Criteria

• content_security_policy added to manifest.json
• Extension tested and working with new CSP
• No CSP violations in browser console
• Documentation added explaining CSP choices

Tech Involved

manifest.json, Chrome Extension Manifest V3 CSP

@Bindu2020324 please assign me these issue

[Shamarvey1]

i needed then please assign this to me i love to work in this issue !

[Bindu2020324]

Hey @Shamarvey1 , are you working on this issue??

[Shamarvey1]

yes i am working due my end sem it takes little time ..

[Bindu2020324]

okay no problem, take your time :)

[UnityTech786]

I would like to wokr on this please asign me