feat: update CSP connect-src and simplify readonly connection logic}
- Bump version to v2026.4.362
- Add https://www.googletagmanager.com to Content-Security-Policy
connect-src directive to allow GTM network requests
- Remove isProOrEnterpriseTier() gate from readonly connection
assignment, making readonly mode available for all tiers