netlify.toml

[build]
  publish = "_site"
  command = "npm run build"

[[headers]]
  # Define which paths this specific [[headers]] block will cover.
  for = "/*"

  [headers.values]
    X-Frame-Options = "DENY"
    X-XSS-Protection = "1; mode=block"
    X-Content-Type-Options = "nosniff"
    Content-Security-Policy = "default-src 'self'; style-src 'unsafe-inline';"

    # Multi-value headers are expressed with multi-line strings.
    cache-control = '''
    max-age=0,
    no-cache,
    no-store,
    must-revalidate'''

[[headers]]
  for = "/"

  [headers.values]
    Link = '''
    </robots.txt>; rel="robots",
    </sitemap.xml>; rel="sitemap",
    </.well-known/agent-skills/index.json>; rel="describedby"'''