refactor: modularize client App.jsx tab components and update Netlify CSP

feat: host Google Fonts locally and tighten Content Security Policy

feat: implement caching, rate limiter, and security headers (CSP) for decoupled deploy

chore: add netlify.toml to specify base directory for building client