Why Astro's Native `security.csp` Breaks on Shiki

Whenever I mention my astro-strict-csp package, the first question developers usually ask is: "Wait,...