fix: move Swagger init to external JS (CSP compliance)

public/docs.html

@@ -104,25 +104,6 @@
   <a href="/" class="back-link">← Back to docfast.dev</a>
   <div id="swagger-ui"></div>
   <script src="/swagger-ui/swagger-ui-bundle.js"></script>
-  <script>
+  <script src="/swagger-init.js"></script>
-    SwaggerUIBundle({
-      url: '/openapi.json',
-      dom_id: '#swagger-ui',
-      deepLinking: true,
-      presets: [
-        SwaggerUIBundle.presets.apis,
-        SwaggerUIBundle.SwaggerUIStandalonePreset
-      ],
-      layout: 'BaseLayout',
-      defaultModelsExpandDepth: 1,
-      defaultModelExpandDepth: 2,
-      docExpansion: 'list',
-      filter: true,
-      tryItOutEnabled: true,
-      requestSnippetsEnabled: true,
-      persistAuthorization: true,
-      syntaxHighlight: { theme: 'monokai' }
-    });
-  </script>
 </body>
 </html>

public/swagger-init.js

@@ -0,0 +1,18 @@
+SwaggerUIBundle({
+  url: "/openapi.json",
+  dom_id: "#swagger-ui",
+  deepLinking: true,
+  presets: [
+    SwaggerUIBundle.presets.apis,
+    SwaggerUIBundle.SwaggerUIStandalonePreset
+  ],
+  layout: "BaseLayout",
+  defaultModelsExpandDepth: 1,
+  defaultModelExpandDepth: 2,
+  docExpansion: "list",
+  filter: true,
+  tryItOutEnabled: true,
+  requestSnippetsEnabled: true,
+  persistAuthorization: true,
+  syntaxHighlight: { theme: "monokai" }
+});