Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 in one change (plan T7) (#20)

ddiff --git a/STATUS.json b/STATUS.json
iindex e0e545d..c114d4c 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -7,7 +7,7 @@
    "runtime": "node 22, express, PostgreSQL 18 (openvibe-sdk/db, async) + Valkey 9",
    "port": 4200,
    "domain": "openvibe.community",
--  "contracts": "openvibe-contracts v0.86.0",
++  "contracts": "openvibe-contracts v0.111.0",
    "capabilities": [
      "community.paste.create",
      "community.paste.write",
ddiff --git a/package-lock.json b/package-lock.json
iindex f3616f9..04bcb2d 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -17,9 +17,9 @@
          "highlight.js": "^11.11.1",
          "iovalkey": "^0.4.0",
          "multer": "^2.4.0",
--        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.86.0",
++        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.111.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.9.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
          "pg": "^8.23.0"
        },
        "devDependencies": {
@@@ -917,9 +917,9 @@
        }
      },
      "node_modules/openvibe-contracts": {
--      "version": "0.86.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.86.0",
--      "integrity": "sha512-3o3AILEBtQ2pK0KqK7GEAlN3HJjaKUl6vrbzEDiBbhK6Nr2hivgN/5MAmJ7WRkgaDkxNsZETs/fLZC2Q4oNCiA==",
++      "version": "0.111.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.111.0",
++      "integrity": "sha512-3F+SPc1m/8fvA8Gs/1mSn6/3FgbMltStl63vHKBioc6pAC3pAJov5M2E4qA3SBGvGo1fYCvDjwqS0CExHvOBFg==",
        "license": "AGPL-3.0-only",
        "dependencies": {
          "ajv": "^8.17.1",
@@@ -962,9 +962,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "2.9.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.9.0",
--      "integrity": "sha512-ESXg23tqj73C14KvoT3kC/6VfZEkjpN1Q9fdipQ3bqIGfxiiSQIz0osGzthHHm3okruCq6aDQld1kFP9tx8+kA==",
++      "version": "2.13.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
++      "integrity": "sha512-0Lvo+bBWVGWREkp92tY4cGI32ZO124WTOjthDNTB96U161odl+npnYEWy3dV2IcgZC4HAX5DSzx4ThgNS2V/sA==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex a694fab..3e51fd1 100644
---- a/package.json
++++ b/package.json
@@@ -28,9 +28,9 @@
      "highlight.js": "^11.11.1",
      "iovalkey": "^0.4.0",
      "multer": "^2.4.0",
--    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.86.0",
++    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.111.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.9.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
      "pg": "^8.23.0"
    },
    "engines": {
ddiff --git a/public/js/community.js b/public/js/community.js
iindex 91ba593..3ea3671 100644
---- a/public/js/community.js
++++ b/public/js/community.js
@@@ -152,14 +152,14 @@
      }
  
      // Pulse follows OpenVibe.Events realtime (roadmap WS-F task 1): on the first page, public activity
--    // from here and the other sites arrives over events.openvibe.network/realtime/stream, and a bar
++    // from here and the other sites arrives over openvibe.events/realtime/stream, and a bar
      // offers to show it (the page itself stays server-rendered, so a reload is the whole update).
      if (pulseEs) { pulseEs.close(); pulseEs = null; }
      var pulse = document.querySelector('[data-pulse-live]');
      if (pulse && typeof EventSource !== 'undefined') {
        var topics = ['community.paste.created', 'live.stream.started', 'blog.post.published', 'wiki.page.published', 'news.story.published'];
        var bar = pulse.querySelector('.pulse-new'), show = pulse.querySelector('[data-pulse-show]'), fresh = 0;
--      var es = new EventSource('https://events.openvibe.network/realtime/stream?topics=' + encodeURIComponent(topics.join(',')));
++      var es = new EventSource('https://openvibe.events/realtime/stream?topics=' + encodeURIComponent(topics.join(',')));
        pulseEs = es;
        es.onmessage = function (m) {
          var d; try { d = JSON.parse(m.data); } catch (e) { return; }
ddiff --git a/server/app.js b/server/app.js
iindex 87b41a6..fd67100 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -89,7 +89,7 @@ async function createApp(opts = {}) {
                  fontSrc: ["'self'", 'https://cdnjs.cloudflare.com', 'https://fonts.gstatic.com', 'data:'],
                  // Screenshots serve from openvibe.media (which may 302 to object storage); avatars from Live/Network.
                  imgSrc: ["'self'", 'data:', 'blob:', 'https:'],
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.live', 'https://openvibe.media', 'https://events.openvibe.network', 'https://cloudflareinsights.com'],
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.live', 'https://openvibe.media', 'https://openvibe.events', 'https://cloudflareinsights.com'],
                  // The Network's hidden /sso/check frame: how a visitor who is signed in elsewhere gets signed in here.
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'self'"],