Fix CSP for blob URLs + fix pyannote AudioDecoder with torchaudio patch

CSP: Add blob: to connect-src/img-src/media-src for wavesurfer.js audio
playback. Add http://tauri.localhost to default-src for devtools.

pyannote: sys.modules block didn't work — pyannote still uses AudioDecoder
unconditionally. New approach: monkey-patch Audio.__call__ in diarize.py
to use torchaudio.load() directly, bypassing the broken torchcodec path.
Patch runs once before pipeline loading.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

python/voice_to_notes/main.py

@@ -5,12 +5,6 @@ from __future__ import annotations
 import signal
 import sys
 
-# Block torchcodec before anything imports it. pyannote.audio has a bug where
-# it conditionally imports AudioDecoder from torchcodec but uses it
-# unconditionally. Making torchcodec fully unimportable forces the torchaudio
-# fallback path.
-sys.modules["torchcodec"] = None  # type: ignore[assignment]
-sys.modules["torchcodec.decoders"] = None  # type: ignore[assignment]
 
 # CRITICAL: Capture real stdout for IPC *before* importing any ML libraries
 # that might print to stdout and corrupt the JSON-line protocol.