Kea3D Core 0.1.98 source

Matching Core source. Fix production importer Worker CSP while keeping document script policy strict. ZIP SHA256: a4762fcf48fa4674daf7da6e7be0c3887f2d637e6ee168b35b05eded755eecee. Native/store acceptance remains separate.