- .htaccess: allow fonts.googleapis.com in style-src and
  fonts.gstatic.com in font-src for IBM Plex Sans Arabic
- Add empty org-applications.css/js so module assets don't 404
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>