Scope CoolProp CSP exception to Mollier pages

[iguchi-lab]

What changed

• Added a dedicated CloudFront response headers policy for /mollier/*.
• Allowed CoolProp's required JavaScript and WebAssembly dynamic compilation only on Mollier pages.
• Restored the stricter CSP for all other calculator pages.
• Added regression tests that verify the exception remains path-scoped.

Why

CoolProp's Emscripten browser bundle uses JavaScript's Function constructor in addition to WebAssembly compilation. The existing CSP allowed only wasm-unsafe-eval, so browsers blocked Mollier calculations.

Validation

• python -m pytest -c pytest-verified.ini — 8 passed
• aws cloudformation validate-template --template-body file://template-deploy.yaml --region ap-northeast-1 — passed
• JavaScript chart tests will run in GitHub Actions because Node.js is not installed locally.