Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 / sdk 0.35.0 in one change (plan T7) (#10)

ddiff --git a/README.md b/README.md
iindex 86b8c85..2526ad4 100644
---- a/README.md
++++ b/README.md
@@@ -254,8 +254,8 @@ Called elsewhere, as the service principal `blog`: `identity.subject.resolve` an
    `openvibe-sdk/db`; Valkey holds the per-actor limit counters (optional: without `VALKEY_URL` they count per process).
  - **Packages** (all pinned by release tarball): `openvibe-publishing` v1.3.0 (async PostgreSQL stores: revisions,
    schedule, taxonomy, citations, media, discussion, seo, authorship, index-hooks, ssr, layout), `openvibe-contracts`
--  v0.97.0, `openvibe-shared` v2.12.0 (Frame, app icon, footer, legal, release, metrics, ready, theme presets),
--  `openvibe-sdk` v0.26.0 (sso, db, PostgreSQL events outbox, service tokens, per-actor limits, testing).
++  v0.97.0, `openvibe-shared` v2.13.0 (Frame, app icon, footer, legal, release, metrics, ready, theme presets),
++  `openvibe-sdk` v0.35.0 (sso, db, PostgreSQL events outbox, service tokens, per-actor limits, testing).
  - **OpenVibe.Network:**
    - SSO: the OAuth client `blog` is already seeded with redirect
      `https://openvibe.blog/auth/callback`.
ddiff --git a/STATUS.json b/STATUS.json
iindex fc97448..fe534e6 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -11,8 +11,8 @@
    "packages": [
      "openvibe-publishing v1.3.0",
      "openvibe-contracts v0.97.0",
--    "openvibe-shared v2.12.0",
--    "openvibe-sdk v0.26.0"
++    "openvibe-shared v2.13.0",
++    "openvibe-sdk v0.35.0"
    ],
    "capabilities": [
      "blog.blog.create",
ddiff --git a/package-lock.json b/package-lock.json
iindex 7b7ce83..5921593 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -17,8 +17,8 @@
          "iovalkey": "^0.4.0",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.97.0",
          "openvibe-publishing": "https://codeload.github.com/OpenVibers/OpenVibe.Publishing/tar.gz/refs/tags/v1.3.0",
--        "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.12.0",
++        "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
          "pg": "^8.23.0"
        },
        "devDependencies": {
@@@ -907,9 +907,9 @@
        }
      },
      "node_modules/openvibe-sdk": {
--      "version": "0.26.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--      "integrity": "sha512-+RK89ZG4WAKIRh89yr3ieIvnyJVNSOI+dsbBqGNcr9UHsJStdxtM75zSDq8cUNpBPQ1X6ElatZrjU9S3s0aEkg==",
++      "version": "0.35.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.0",
++      "integrity": "sha512-IF7XB97tU7Q+ccwssGx6QXXcfDPcVpl+mX3BjIr7C6NJlcmoqj9DbHiKrBxlVav0eG44Jf8zuXEwokrHDq3J0w==",
        "license": "MIT",
        "engines": {
          "node": ">=20"
@@@ -936,9 +936,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "2.12.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.12.0",
--      "integrity": "sha512-GQpNFs2h61OKKNLexQwCfSJTLzNQ7fSbwqvrerB4oNdoxUgDvmdD43SELWycrb9DX8lkje4cR3ARznYIINnR8Q==",
++      "version": "2.13.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
++      "integrity": "sha512-0Lvo+bBWVGWREkp92tY4cGI32ZO124WTOjthDNTB96U161odl+npnYEWy3dV2IcgZC4HAX5DSzx4ThgNS2V/sA==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex a597946..5d86bd6 100644
---- a/package.json
++++ b/package.json
@@@ -29,8 +29,8 @@
      "iovalkey": "^0.4.0",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.97.0",
      "openvibe-publishing": "https://codeload.github.com/OpenVibers/OpenVibe.Publishing/tar.gz/refs/tags/v1.3.0",
--    "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.12.0",
++    "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
      "pg": "^8.23.0"
    },
    "devDependencies": {
ddiff --git a/server/app.js b/server/app.js
iindex 0cc8881..f9c835b 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -126,8 +126,8 @@ async function createApp(opts = {}) {
                  // Media objects are served by openvibe.media (which may redirect to object storage).
                  imgSrc: ["'self'", 'data:', 'https:'],
                  mediaSrc: ["'self'", 'https:'],
--                // events.openvibe.network: release notifications (release-watch's EventSource, openvibe-shared 1.17).
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://cloudflareinsights.com', 'https://events.openvibe.network'],
++                // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 1.17).
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://cloudflareinsights.com', 'https://openvibe.events'],
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'self'"],
                  objectSrc: ["'none'"],