Security & reliability hardening

Improvements

• Content Security Policy enforced — Fulify now enforces a strict policy that only allows scripts from trusted sources (Fulify and the sign-in and payment services it relies on), reducing the risk of script injection.
• Save brands without syncing — The brand editor's button is now Save Changes; saving records your edits and marks the brand as needing a re-sync, instead of implying an immediate channel push.

Fixes

• Product search reliability — Fixed an intermittent issue where the Products list could briefly show the full catalog under a "matching…" label. Search now filters reliably on every load, including shared/bookmarked ?search= links.