feat: enable S3 video uploads and update related configurations

- Added support for self-hosted S3 video uploads with new environment variables: OPENFRAME_ENABLE_S3_VIDEO_UPLOADS and OPENFRAME_MAX_VIDEO_UPLOAD_BYTES.
- Updated .env.example and .env.docker.example to reflect new configuration options.
- Enhanced Content Security Policy to include origins for S3-compatible storage.
- Updated dependencies for AWS SDK to support new features.
- Refactored upload logic to accommodate both Bunny and S3 upload providers.
- Updated documentation to clarify the usage of direct uploads and S3 configurations.
- Closes #11

lib/r2-media-proxy.ts

@@ -168,13 +168,19 @@ export async function proxyR2MediaObject({
   }
 
   const headers = new Headers();
-  setIfPresent(headers, 'Content-Type', objectResponse.ContentType || fallbackContentType);
+  const resolvedContentType =
+    objectResponse.ContentType && objectResponse.ContentType !== 'application/octet-stream'
+      ? objectResponse.ContentType
+      : fallbackContentType;
+  setIfPresent(headers, 'Content-Type', resolvedContentType);
   setIfPresent(headers, 'Content-Length', objectResponse.ContentLength);
   setIfPresent(headers, 'Content-Range', objectResponse.ContentRange);
   setIfPresent(headers, 'ETag', objectResponse.ETag);
   setIfPresent(headers, 'Last-Modified', objectResponse.LastModified?.toUTCString());
   setIfPresent(headers, 'Accept-Ranges', objectResponse.AcceptRanges || 'bytes');
   headers.set('Cache-Control', cacheControl);
+  headers.set('X-Content-Type-Options', 'nosniff');
+  headers.set('Content-Disposition', 'inline');
 
   if (extraHeaders) {
     for (const [name, value] of Object.entries(extraHeaders)) {