fix: resolve CSP violations and... whatever was wrong with @atproto/api
- Add CSP directives for Google Fonts (style-src-elem, font-src)
- Include @atproto/api in Vite optimizeDeps (something about CommonJS?)
- Replace flex-grow with grow utility class in layout
Fixes CSP blocking of fonts.googleapis.com and fonts.gstatic.com
Apparently Vite needed to transform @atproto/api or something? It works now.