chore: migrar CSRF a trustedOrigins y sincronizar pre-build

Co-authored-by: aider (openrouter/openai/gpt-5) <aider@aider.chat>

Dockerfile

@@ -28,7 +28,7 @@ COPY proxy.ts ./
 
 # Build the web app
 WORKDIR /app/apps/web
-RUN bun run build
+RUN bunx svelte-kit sync && bun run build
 
 # Return to root workdir
 WORKDIR /app

apps/web/svelte.config.js

@@ -11,10 +11,19 @@ const config = {
 		// adapter-auto only supports some environments, see https://svelte.dev/docs/kit/adapter-auto for a list.
 		// If your environment is not supported, or you settled on a specific environment, switch out the adapter.
 		// See https://svelte.dev/docs/kit/adapters for more information about adapters.
-		adapter: adapter(),
-		csrf: {
-			checkOrigin: false
-		}
+		adapter: adapter()
+	},
+	csrf: {
+		trustedOrigins: [
+			'http://localhost:3000',
+			'http://127.0.0.1:3000',
+			'http://localhost:5173',
+			'http://127.0.0.1:5173',
+			'https://localhost:3000',
+			'https://127.0.0.1:3000',
+			'https://localhost:5173',
+			'https://127.0.0.1:5173'
+		]
 	}
 };