Fix CSP for the Diary example

This gets the diary running out of the box again and retains a strict CSP `connect-src` while bringing the default ports to parity.