Oracle: context/doctor/pin/surface-brief/critique/palette/embed/signals/csp/seed/genimg/question cases and goldens

Prepared with AI assistance (Claude Code).

tests/oracle/workspaces/ctx-csp-append-string/next.config.mjs

@@ -0,0 +1,6 @@
+const csp = "default-src 'self'; script-src 'self'; connect-src 'self'";
+export default {
+  async headers() {
+    return [{ source: "/(.*)", headers: [{ key: "Content-Security-Policy", value: csp }] }];
+  },
+};