Add TLS audit report at /tls-report (#100)

* Add TLS audit report page at /tls-report

Static HTML report showing TLS certificate status for all Paseo Asset
Hub peers discovered via Kademlia DHT. Includes live browser WebSocket
testing, search, and filtering.

- Add public/tls-report.html (self-contained report)
- Add rewrite /tls-report -> /tls-report.html for clean URL
- Add CSP override for report page (Google Fonts + wss:// for live tests)

Report tooling: https://github.com/paseo-network/paseo-tls-audit

* fix(tls-report): handle IPv6 and private IPs in WebSocket URL builder

Prevents DOMException when building wss:// URLs from multiaddrs
containing IPv6 or private/loopback addresses.

* Regenerate TLS report: filter non-routable IPs, fix instructions

- Remove private, loopback, CGNAT, and link-local addresses from report
- Switch instructions from bun to npm (smoldot WASM compat)

* deploy vercel

---------

Co-authored-by: Maria Ayelen Murano <muranoayelen@gmail.com>

Author: al3mart

next.config.ts

@@ -33,6 +33,14 @@ const contentSecurityPolicy =
 		: prodContentSecurityPolicy;
 
 const nextConfig: NextConfig = {
+	async rewrites() {
+		return [
+			{
+				source: "/tls-report",
+				destination: "/tls-report.html",
+			},
+		];
+	},
 	async headers() {
 		return [
 			{
@@ -74,6 +82,27 @@ const nextConfig: NextConfig = {
 					},
 				],
 			},
+			{
+				// TLS report needs Google Fonts and wss:// for live testing
+				source: "/tls-report:path(|.html)",
+				headers: [
+					{
+						key: "Content-Security-Policy",
+						value: [
+							"default-src 'self'",
+							"script-src 'self' 'unsafe-inline'",
+							"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
+							"style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com",
+							"font-src 'self' data: https://fonts.gstatic.com",
+							"img-src 'self' data:",
+							"connect-src 'self' wss:",
+							"frame-ancestors 'self'",
+							"base-uri 'self'",
+							"form-action 'self'",
+						].join("; "),
+					},
+				],
+			},
 		];
 	},
 };