Fixed
- Switch embeds from
youtube-nocookie.comtoyoutube.com— YouTube's bot detection blocks anonymous nocookie embeds with a "Sign in to confirm you're not a bot" wall; standard embeds share the tablet's Google session (closes #38) - Updated CSP
frame-srcheader to allowyoutube.com - Updated docs: README, setup guide, troubleshooting, design decisions