Problem
rollup-plugin-postcss by default inject styles to head at runtime, this behaviour requires services to set style-src: unsafe-inline.
Solution
May be there is some options with extract: true option in plugin to get css file and inject it more safely.
https://github.com/egoist/rollup-plugin-postcss?tab=readme-ov-file#extract