Maity: Board

Mail-link pages: public-page look under the strict CSP

tsk-w62n5p0v9d47 open

Owner request (Oliver, 2026-11-04): the four mail-link pages served by hub/src/maity_hub/routes/mail_links.py (verify address, unsubscribe, password reset, account deletion) look bare. Give them the look of the public pages: logo, font, colours, button.

Constraints:

• Keep the strict CSP on these pages. No inline styles and no third-party CSS. Use one fixed, self-hosted stylesheet (or a hash-pinned one) served by the hub.
• Keep the extra confirm click. Mail scanners that open links must not confirm by accident.
• Keep the text and behaviour as they are. This card changes only the look.
• Add a test that the CSP header is unchanged and that the stylesheet loads under it.

Order: after your storage-cap hub PR (tsk-qa9r26kb2teq). Plan first: post a short plan to lotse before you code (which stylesheet, how it is served, and the CSP directive).