Add comprehensive /features page + allow Unsplash imagery

next.config.mjs

@@ -12,6 +12,8 @@ const nextConfig = {
       // DALL·E asset URLs (OpenAI blob storage) used before they are persisted to local disk.
       // Scoped to the single OpenAI host actually used — no broad *.blob.core.windows.net wildcard.
       { protocol: "https", hostname: "oaidalleapiprodscus.blob.core.windows.net" },
+      // Marketing imagery (features/about pages).
+      { protocol: "https", hostname: "images.unsplash.com" },
     ],
   },
   // Server-only packages that should be required at runtime, not bundled by webpack.
@@ -24,7 +26,7 @@ const nextConfig = {
     // to per-request nonces (and drop 'unsafe-*') once the app is migrated.
     const csp = [
       "default-src 'self'",
-      "img-src 'self' data: https://*.blob.core.windows.net",
+      "img-src 'self' data: https://*.blob.core.windows.net https://images.unsplash.com",
       "media-src 'self'",
       "style-src 'self' 'unsafe-inline'",
       "script-src 'self' 'unsafe-inline' 'unsafe-eval'",