connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#227)

ddiff --git a/server/app.js b/server/app.js
iindex fd77194..55fb013 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -149,7 +149,7 @@ async function createApp(opts = {}) {
                  fontSrc: ["'self'", 'https://cdnjs.cloudflare.com', 'https://fonts.gstatic.com', 'data:'],
                  imgSrc: ["'self'", 'data:', 'blob:', 'https:'],
                  // The shared navbar's notification bell hears OpenVibe.Events (notificationsRealtime).
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.chat', 'https://openvibe.events', 'https://cloudflareinsights.com'],
                  // The Network's hidden /sso/check frame: how a visitor who is signed in elsewhere gets signed in here.
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'self'"],
ddiff --git a/server/spaces/pages.js b/server/spaces/pages.js
iindex 70cc458..0354707 100644
---- a/server/spaces/pages.js
++++ b/server/spaces/pages.js
@@@ -66,7 +66,7 @@ function createSpacesPages(ctx) {
              "style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://fonts.googleapis.com https://openvibe.network",
              "font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.gstatic.com",
              "img-src 'self' data: blob: https:", "media-src 'self' data: blob: https:",
--            "connect-src 'self' https://openvibe.network https://openvibe.events https://cloudflareinsights.com",
++            "connect-src 'self' https://openvibe.network https://openvibe.chat https://openvibe.events https://cloudflareinsights.com",
              `frame-src 'self' https://openvibe.network ${sites}`, "frame-ancestors 'self'", "object-src 'none'", "base-uri 'self'",
              "form-action 'self' https://openvibe.network", "script-src-attr 'unsafe-inline'",
          ].join('; '));