fix: admin CSP allow inline scripts

script-src 'self' 'unsafe-inline' added to admin Content-Security-Policy.
default-src 'self' was blocking OverType editor init block and
the dev live-reload poller. Admin section is auth-gated so
unsafe-inline is acceptable.

justfile

@@ -70,7 +70,6 @@ deploy-nginx:
     @echo "Files uploaded. SSH into the server and run:"
     @echo ""
     @echo "  sudo bash /tmp/deploy-server.sh"
-    @echo "  sudo systemctl reload nginx"
     @echo ""
 
 [group('deploy')]