Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 in one change (plan T7) (#14)

ddiff --git a/package-lock.json b/package-lock.json
iindex 3c34853..93ae4db 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -15,7 +15,7 @@
          "express": "^4.21.2",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.96.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.12.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
          "pg": "^8.23.0"
        },
        "devDependencies": {
@@@ -795,9 +795,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "2.12.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.12.0",
--      "integrity": "sha512-GQpNFs2h61OKKNLexQwCfSJTLzNQ7fSbwqvrerB4oNdoxUgDvmdD43SELWycrb9DX8lkje4cR3ARznYIINnR8Q==",
++      "version": "2.13.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
++      "integrity": "sha512-0Lvo+bBWVGWREkp92tY4cGI32ZO124WTOjthDNTB96U161odl+npnYEWy3dV2IcgZC4HAX5DSzx4ThgNS2V/sA==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex 96fa438..6c893f7 100644
---- a/package.json
++++ b/package.json
@@@ -27,7 +27,7 @@
      "express": "^4.21.2",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.96.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.26.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.12.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.0",
      "pg": "^8.23.0"
    },
    "engines": {
ddiff --git a/server/web/page.js b/server/web/page.js
iindex 9c4a0a9..084dc0b 100644
---- a/server/web/page.js
++++ b/server/web/page.js
@@@ -35,7 +35,7 @@ const NETWORK = 'https://openvibe.network';
  // performance; script-src loads the beacon, connect-src is where it reports.
  const CF_BEACON = 'https://static.cloudflareinsights.com', CF_REPORT = 'https://cloudflareinsights.com';
  // The Events realtime stream: release notifications (release-watch's EventSource, openvibe-shared 1.17).
--const EVENTS = 'https://events.openvibe.network';
++const EVENTS = 'https://openvibe.events';
  const shell = require('openvibe-shared/shell');
  const showcase = require('openvibe-shared/showcase');
  const { DEFAULT_EVENT_OWNERS } = require('../config');
ddiff --git a/test/page.test.js b/test/page.test.js
iindex c8b7738..d34cdeb 100644
---- a/test/page.test.js
++++ b/test/page.test.js
@@@ -41,7 +41,7 @@ t('the front page is a search form, indexable, no-store, with a strict CSP', asy
      // Plus Cloudflare Web Analytics, which Cloudflare injects at the edge (the privacy text discloses it).
      assert.match(csp, /script-src 'self' https:\/\/openvibe\.network https:\/\/static\.cloudflareinsights\.com 'sha256-[^']+'/);
      // And the Events realtime stream, for release notifications (release-watch, openvibe-shared 1.17).
--    assert.match(csp, /connect-src 'self' https:\/\/openvibe\.network https:\/\/cloudflareinsights\.com https:\/\/events\.openvibe\.network;/);
++    assert.match(csp, /connect-src 'self' https:\/\/openvibe\.network https:\/\/cloudflareinsights\.com https:\/\/openvibe\.events;/);
      assert.ok(!/script-src[^;]*unsafe-inline/.test(csp), 'no inline script allowed by default');
      const allowed = [...(/script-src ([^;]*)/.exec(csp)[1]).matchAll(/'sha256-([^']+)'/g)].map((m) => m[1]);
      const scripts = [...r.text.matchAll(/<script\b([^>]*)>([\s\S]*?)<\/script>/gi)];