move directives to svelte config

netlify.toml

@@ -8,5 +8,4 @@ functions = "functions/"
   [headers.values]
     X-Frame-Options = "SAMEORIGIN"
     X-XSS-Protection = "0"
-    X-Content-Type-Options = "nosniff"
-    Content-Security-Policy = "default-src 'self' *.cloudinary.com  *.typekit.net;"
+    X-Content-Type-Options = "nosniff"

svelte.config.js

@@ -33,6 +33,8 @@ const config = {
     csp: {
       mode: 'auto',
       directives: {
+        'default-src': ['self', '*.typekit.net'],
+        'img-src': ['self', '*.cloudinary.com', 'data:'],
         'script-src': ['self', 'unsafe-eval', 'unsafe-inline']
       },
     },