fix: move Swagger init to external JS (CSP compliance)

public/docs.html

@@ -104,25 +104,6 @@
   <a href="/" class="back-link">← Back to docfast.dev</a>
   <div id="swagger-ui"></div>
   <script src="/swagger-ui/swagger-ui-bundle.js"></script>
-  <script>
-    SwaggerUIBundle({
-      url: '/openapi.json',
-      dom_id: '#swagger-ui',
-      deepLinking: true,
-      presets: [
-        SwaggerUIBundle.presets.apis,
-        SwaggerUIBundle.SwaggerUIStandalonePreset
-      ],
-      layout: 'BaseLayout',
-      defaultModelsExpandDepth: 1,
-      defaultModelExpandDepth: 2,
-      docExpansion: 'list',
-      filter: true,
-      tryItOutEnabled: true,
-      requestSnippetsEnabled: true,
-      persistAuthorization: true,
-      syntaxHighlight: { theme: 'monokai' }
-    });
-  </script>
+  <script src="/swagger-init.js"></script>
 </body>
 </html>