Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 in one change (plan T7) (#39)

ddiff --git a/package-lock.json b/package-lock.json
iindex 8051d381..19288f06 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -27,7 +27,7 @@
          "onnxruntime-node": "^1.20.0",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.83.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.5.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
          "pg": "^8.23.1",
          "sanitize-html": "^2.17.7",
          "sdp-transform": "^3.0.0",
@@@ -2860,9 +2860,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "2.5.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.5.0",
--      "integrity": "sha512-fHuUS6SXM7ezatfAyqLm1V8B6puV9YXSnz6aG6XQbWx28qghRCCHeUF3lr4nxiCGdn9SyikYtIyLGL5r1ycp9Q==",
++      "version": "2.13.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
++      "integrity": "sha512-0Lvo+bBWVGWREkp92tY4cGI32ZO124WTOjthDNTB96U161odl+npnYEWy3dV2IcgZC4HAX5DSzx4ThgNS2V/sA==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex d313d716..f0ef2c39 100644
---- a/package.json
++++ b/package.json
@@@ -48,7 +48,7 @@
      "onnxruntime-node": "^1.20.0",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.83.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.5.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
      "pg": "^8.23.1",
      "sanitize-html": "^2.17.7",
      "sdp-transform": "^3.0.0",
ddiff --git a/public/js/ov-live-realtime.js b/public/js/ov-live-realtime.js
iindex 7583cf73..e6ad5bec 100644
---- a/public/js/ov-live-realtime.js
++++ b/public/js/ov-live-realtime.js
@@@ -1,6 +1,6 @@
  /**
   * Live's stream lifecycle over OpenVibe.Events realtime (roadmap WS-F task 1): the public
-- * live.stream.started / live.stream.ended events on events.openvibe.network/realtime/stream (SSE).
++ * live.stream.started / live.stream.ended events on openvibe.events/realtime/stream (SSE).
   * The home page's live grid refreshes the moment a stream starts or ends, and polls only as a
   * safety net while this is connected (public/js/app-home.js startHomeRefresh).
   *
@@@ -13,7 +13,7 @@
   */
  (function () {
      'use strict';
--    const URL_ = 'https://events.openvibe.network/realtime/stream?topics=live.stream.started,live.stream.ended';
++    const URL_ = 'https://openvibe.events/realtime/stream?topics=live.stream.started,live.stream.ended';
      const listeners = new Set();
      let es = null;
      let connected = false;
ddiff --git a/server/index.js b/server/index.js
iindex 02c6706c..4b275927 100644
---- a/server/index.js
++++ b/server/index.js
@@@ -373,7 +373,7 @@ app.use(helmet({
              // request tab was doing for every YouTube link.
              imgSrc: ["'self'", "data:", "blob:", "image.tmdb.org", "https://openvibe.network", "https://openvibe.media", "cdn.frankerfacez.com", "cdn.betterttv.net", "cdn.7tv.app", "https://files.kick.com", "https://i.ytimg.com", "https://img.youtube.com", "https://i.vimeocdn.com"],
              // https://cloudflareinsights.com is where Cloudflare Web Analytics' beacon (script-src static.cloudflareinsights.com) reports.
--            connectSrc: ["'self'", "wss:", "https://openvibe.network", "https://events.openvibe.network", "https://openvibe.media", "https://openvibe.games", "https://cdn.jsdelivr.net", "https://esm.sh", "https://static.cloudflareinsights.com", "https://cloudflareinsights.com", whipConnectSrc],
++            connectSrc: ["'self'", "wss:", "https://openvibe.network", "https://openvibe.events", "https://openvibe.media", "https://openvibe.games", "https://cdn.jsdelivr.net", "https://esm.sh", "https://static.cloudflareinsights.com", "https://cloudflareinsights.com", whipConnectSrc],
              // VODs/clips play from openvibe.media (the /api proxies 302 there), which may
              // itself redirect to presigned B2/R2 object-store URLs — all must be allowed
              // or the browser blocks the media element.