HTTP/1.1 200 OKAge: 0Cache-Control: private, no-cache, no-store, max-age=0, must-revalidateContent-Encoding: gzipContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://lh3.googleusercontent.com https://bocasggbmidsrwbirwdv.supabase.co; font-src 'self' data:; connect-src 'self'; frame-src 'none'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requestsContent-Type: text/html; charset=utf-8Date: Wed, 30 Sep 2026 12:26:32 GMTLink: ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2"Permissions-Policy: camera=(), microphone=(), geolocation=()Referrer-Policy: strict-origin-when-cross-originServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetchX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: onX-Frame-Options: DENYX-Matched-Path: /X-Vercel-Cache: MISSX-Vercel-Id: yul1::iad1::sknws-1790771192417-1d6b9c1397cf