Fix CSP for Apple Music previews and Cloudinary fetches

Created by: jedmund

Summary

• Add https://audio-ssl.itunes.apple.com to media-src CSP directive so Apple Music audio previews can play
• Add https://res.cloudinary.com to connect-src CSP directive so Cloudinary-hosted SVGs can be fetched

Test plan

• Apple Music preview playback works on the now playing widget
• Cloudinary SVG logos load without console errors