Strict-CSP brand theming and build budgets in Astro (no inline styles, fail the build at 50 KB of JS)

How I moved config-driven brand colours out of an inline style attribute into a generated /brand.css endpoint, and added a post-build budget script that fails CI on JS, font and inline-code regressions.