docs: enable sri in docs site

.hooks/pre-commit

@@ -8,3 +8,4 @@ set -eu
 set -o pipefail
 
 pnpm moon ci
+pnpm moon :test.e2e

docs/astro.config.mjs

@@ -1,6 +1,7 @@
 import { defineConfig, passthroughImageService } from 'astro/config'
 import starlight from '@astrojs/starlight'
 import aws from 'astro-sst'
+import { shield } from '@kindspells/astro-shield'
 
 export default defineConfig({
 	output: 'static',
@@ -10,6 +11,7 @@ export default defineConfig({
 		service: passthroughImageService(),
 	},
 	integrations: [
+		shield({}),
 		starlight({
 			title: 'Astro-Shield Docs',
 			defaultLocale: 'en',

docs/package.json

@@ -17,6 +17,7 @@
 	"devDependencies": {
 		"@astrojs/check": "^0.5.10",
 		"@astrojs/starlight": "^0.21.2",
+		"@kindspells/astro-shield": "workspace:^",
 		"astro": "^4.5.12",
 		"typescript": "^5.4.3"
 	}

docs/src/content/docs/index.mdx

@@ -29,10 +29,11 @@ import { Card, CardGrid } from '@astrojs/starlight/components';
 		Astro-Shield can automatically set the `Content-Security-Policy` headers
 		for you.
 	</Card>
-	{/* <Card title="Block injected scripts" icon="close">
-		Blablablah...
+	<Card title="Block injected scripts" icon="close">
+		When Astro-Shield detects a suspicious script (that is, likely injected by
+		an attacker), it will remove it from the rendered HTML.
 	</Card>
-	<Card title="Prevent Prototype Pollution" icon="seti:gulp">
+	{/* <Card title="Prevent Prototype Pollution" icon="seti:gulp">
 		Blablablah...
 	</Card> */}
 </CardGrid>