feat(live-news): add CNN & CNBC HLS streams via sidecar proxy (#682)

* feat(live-news): add CNN & CNBC HLS streams via sidecar proxy (desktop only)

Add /api/hls-proxy route to sidecar that proxies HLS manifests and
segments from allowlisted CDN hosts, injecting the required Referer
header that browsers cannot set. Rewrites m3u8 URLs so all segments
and encryption keys also route through the proxy.

Desktop gets native <video> HLS playback for CNN and CNBC; web falls
through to YouTube as before (no bandwidth cost on Vercel).

* fix(types): add missing @types/dompurify dev dependency

package.json

@@ -58,8 +58,8 @@
     "@types/canvas-confetti": "^1.9.0",
     "@types/d3": "^7.4.3",
     "@types/dompurify": "^3.0.5",
-    "@types/marked": "^5.0.2",
     "@types/maplibre-gl": "^1.13.2",
+    "@types/marked": "^5.0.2",
     "@types/papaparse": "^5.5.2",
     "@types/topojson-client": "^3.1.5",
     "@types/topojson-specification": "^1.0.5",