fix: add PostHog domains to CSP connect-src

- Add https://*.i.posthog.com to both enforcement and reportOnly CSP
- Resolves CSP violations blocking PostHog source maps and assets
- Fixes blocked requests to recorder.js.map and surveys.js.map

This ensures PostHog analytics work properly without CSP violations.

apps/dashboard/svelte.config.js

@@ -53,7 +53,7 @@ const config = {
           'https://api.classroomio.com',
           'https://assets.cdn.clsrio.com',
           'https://cdn.plyr.io',
-          'https://eu.i.posthog.com',
+          'https://*.i.posthog.com',
           'https://umami.hz.oncws.com',
           'https://*.r2.cloudflarestorage.com',
           'http://localhost:54321',
@@ -100,7 +100,7 @@ const config = {
           'https://api.classroomio.com',
           'https://assets.cdn.clsrio.com',
           'https://cdn.plyr.io',
-          'https://eu.i.posthog.com',
+          'https://*.i.posthog.com',
           'https://umami.hz.oncws.com',
           'https://*.r2.cloudflarestorage.com',
           'http://localhost:54321',