Integrate Umami analytics (privacy-friendly, cookieless)

- Add the Umami tracking snippet to index.html (rides into prerendered pages too).
- Allow https://fickanalytics.phluit.net in the prod CSP script-src and connect-src
  so the script loads and can send events.

apps/api/src/server.ts

@@ -71,11 +71,11 @@ export async function buildServer() {
       ? {
           directives: {
             defaultSrc: ["'self'"],
-            scriptSrc: ["'self'", 'https://challenges.cloudflare.com'],
+            scriptSrc: ["'self'", 'https://challenges.cloudflare.com', 'https://fickanalytics.phluit.net'],
             styleSrc: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],
             fontSrc: ["'self'", 'https://fonts.gstatic.com', 'data:'],
             imgSrc: ["'self'", 'data:', 'blob:', 'https://*.digitaloceanspaces.com', 'https://*.cdn.digitaloceanspaces.com'],
-            connectSrc: ["'self'"],
+            connectSrc: ["'self'", 'https://fickanalytics.phluit.net'],
             frameSrc: ['https://challenges.cloudflare.com'],
             frameAncestors: ["'none'"],
             formAction: ["'self'"],