manifest: add explicit content_security_policy (same as default)
fix Ż in my last name by using &#379; instead