feat(proxy): accept lists and globs for the CSP config file locations

[dschmidt]

Summary

PROXY_CSP_CONFIG_FILE_LOCATION and PROXY_CSP_CONFIG_FILE_OVERRIDE_LOCATION accept a list, and each element can be a path or a glob. That way every web app can ship its own csp.yaml and the proxy merges them, e.g. /etc/opencloud/csp.yaml,/web/apps/*/csp.yaml.

 LoadCSPConfig
-  LOCATION:          merge(default CSP, file)
-  OVERRIDE_LOCATION: file
+  LOCATION:          merge(default CSP, files...)
+  OVERRIDE_LOCATION: merge(files...), LOCATION is ignored as before

files is the list of that variable with globs expanded. The list order is the merge order. Only the matches of a single glob have no given order, they are merged sorted by name.

	LOCATION	OVERRIDE_LOCATION
glob without matches	skipped	skipped
plain path, file missing	fatal, as before	fatal, as before
no file at all	default CSP	fatal

The fields change from string to []string. A single path keeps working from env and from a yaml scalar. The merge semantics are unchanged.

loadCSPConfig now uses its own gookit instance instead of the global one, because a second call in the same process panicked. The new tests need that.

This enables opencloud-eu/web-extensions#621

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 20 complexity

Metric	Results
Complexity	20

View in Codacy

🟢 Coverage 79.31% diff coverage · +0.04% coverage variation

Metric	Results
Coverage variation	✅ +0.04% coverage variation (-1.00%)
Diff coverage	✅ 79.31% diff coverage

View coverage diff in Codacy

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (25791bb)	91336	22928	25.10%
Head commit (1bbe19f)	91367 (+31)	22973 (+45)	25.14% (+0.04%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#3686)	58	46	79.31%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}