Yelp 49.1, fixing: Flatpak applications are able to exfiltrate host files due to yelp's CSP being too permissive

Source: Fedora 43 Yelp 49.1 Critical CSP Exfiltration Fix FEDORA-2026-7c3b91a2bc