fix(csp): permitir unsafe-eval apenas em desenvolvimento

React precisa de eval() em dev para reconstruir stack traces.
Produção continua sem unsafe-eval.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

next.config.ts

@@ -4,6 +4,8 @@ import type { NextConfig } from "next";
 // Carregar variáveis de ambiente explicitamente
 dotenv.config();
 
+const isDev = process.env.NODE_ENV === "development";
+
 const nextConfig: NextConfig = {
 	output: "standalone",
 	cacheComponents: true,
@@ -46,7 +48,7 @@ const nextConfig: NextConfig = {
 						key: "Content-Security-Policy",
 						value: [
 							"default-src 'self'",
-							"script-src 'self' 'unsafe-inline' https://umami.felipecoutinho.com",
+							`script-src 'self' 'unsafe-inline'${isDev ? " 'unsafe-eval'" : ""} https://umami.felipecoutinho.com`,
 							"style-src 'self' 'unsafe-inline'",
 							"img-src 'self' https://lh3.googleusercontent.com data: blob:",
 							"font-src 'self'",