Enhance security header policies with stricter controls

Added Cross-Origin Embedder Policy with UnsafeNone directive to enable embedding YouTube videos, and stricter Permissions Policy for camera, microphone, and geolocation. These updates improve protection against cross-origin attacks and unauthorized access. Updated service configurations in `Program.cs` to apply these enhanced measures. This change bolsters application security and adheres to best practices.

Author: shahabganji

src/LinkDotNet.Blog.Web/Program.cs

@@ -27,7 +27,15 @@ public static async Task Main(string[] args)
     private static void RegisterServices(WebApplicationBuilder builder)
     {
         builder.Services.AddSecurityHeaderPolicies()
-            .SetDefaultPolicy(p => p.AddDefaultSecurityHeaders())
+            .SetDefaultPolicy(p =>
+                p.AddDefaultSecurityHeaders()
+                    .AddCrossOriginEmbedderPolicy(policy => policy.UnsafeNone())
+                    .AddPermissionsPolicy(policy =>
+                    {
+                        policy.AddCamera().None();
+                        policy.AddMicrophone().None();
+                        policy.AddGeolocation().None();
+                    }))
             .AddPolicy("API", p => p.AddDefaultApiSecurityHeaders());
 
         builder.Services