feat(privacy): make Yandex Metrika tracking consent-based or removable

[cypriannwokolo2-creator]

Summary

src/app/layout.tsx:151-168 embeds Yandex Metrika (counter 109691925) as an inline nonce script plus a noscript tracking pixel; this loads third-party tracking on all pages with no consent mechanism.

Acceptance Criteria

• Consent-banner gating or opt-out for tracking
• Tracking loads only after consent
• Document/allowlist approach in CSP
• Tests for conditional loading

Complexity

High - third-party integration + consent UX.

[bonatkenneth-web]

@bonatkenneth-web has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello maintainer I would like to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @bonatkenneth-web to this issue.

[StephenMero]

@StephenMero has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Please let me work on this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @StephenMero to this issue.