Tried to bundle a release with Pleroma for the first time and noticed CSP violations we didn't check for in the past