fix(analytics): CSP'ye kalan enhanced-conversion endpoint'lerini ekle

Dev testinde ana conversion ping'i (googleadservices/pagead/conversion) geçti
ama ad.doubleclick.net (ccm/collect enhanced) + google.com.tr (TR yerelleştirilmiş
1p-conversion) hâlâ bloklanıyordu. img-src/connect-src'e eklendi.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/api/src/main.ts

@@ -73,8 +73,10 @@ async function bootstrap() {
             "https://destek.sase.tr",
             // Google Ads conversion + remarketing pixel pings (fire as images).
             "https://www.google.com",
+            "https://www.google.com.tr",
             "https://www.googleadservices.com",
             "https://googleads.g.doubleclick.net",
+            "https://ad.doubleclick.net",
           ],
           fontSrc: ["'self'", "https:", "data:"],
           mediaSrc: ["'self'", "data:", "https://destek.sase.tr"],
@@ -91,8 +93,10 @@ async function bootstrap() {
             // google.com 1p-conversion & ccm/collect enhanced-conversion beacons).
             "https://www.googletagmanager.com",
             "https://www.google.com",
+            "https://www.google.com.tr",
             "https://www.googleadservices.com",
             "https://googleads.g.doubleclick.net",
+            "https://ad.doubleclick.net",
             // Sentry browser SDK envelope POSTs (otolog org, de region).
             // Without this CSP silently blocks every error/replay upload.
             "https://*.ingest.de.sentry.io",