fix: move Swagger init to external JS (CSP compliance)

public/swagger-init.js

@@ -0,0 +1,18 @@
+SwaggerUIBundle({
+  url: "/openapi.json",
+  dom_id: "#swagger-ui",
+  deepLinking: true,
+  presets: [
+    SwaggerUIBundle.presets.apis,
+    SwaggerUIBundle.SwaggerUIStandalonePreset
+  ],
+  layout: "BaseLayout",
+  defaultModelsExpandDepth: 1,
+  defaultModelExpandDepth: 2,
+  docExpansion: "list",
+  filter: true,
+  tryItOutEnabled: true,
+  requestSnippetsEnabled: true,
+  persistAuthorization: true,
+  syntaxHighlight: { theme: "monokai" }
+});