Fix deep-inspection article quality: titles, i18n, CSP hashes, doc-analysis markup, lang switchers, ******

[Copilot]

Review feedback on the paid police education deep-inspection PR identified generic titles, raw Markdown leaking into rendered HTML, broken language links pointing to non-existent files, script-src 'unsafe-inline' CSP, and incomplete Swedish translations. Also fixes a latent auth bug where legacy "******" config values were passed raw to the MCP gateway.

EN article

• Title: "Deep Inspection: Policy Analysis" → "Deep Inspection: Paid Police Education Proposal" across <title>, og/twitter meta, <h1> ×2, JSON-LD headline, and BreadcrumbList
• doc-analysis: Raw Markdown (# heading + duplicate [text](url) ×2) → <h4> + single <a>
• h3: presstraff om forslag om betald polisutbildning → Pressträff om förslag om betald polisutbildning
• hreflang + language switcher: Removed 12 non-existent alternates (da/nb/fi/de/fr/es/nl/ar/he/ja/ko/zh); kept en/sv/x-default
• CSP: script-src 'unsafe-inline' → four sha256 hashes (anti-flash + 3× JSON-LD)

SV article

All EN fixes above, plus:

• BreadcrumbList "Nyheter": index.html → index_sv.html
• Reading time: 1 min read → 1 min läsning (body + twitter:data1)
• Dashboard: All English labels/headings translated to Swedish
• Mindmap: "Parliamentary Analysis" → Parlamentarisk analys, "Document Types" → Dokumenttyper, "Stakeholders" → Intressenter, "Policy Domains" → Policyområden

MCP auth — legacy Bearer prefix stripping

scripts/mcp-client/client.ts — Priority 4 path now strips prefix:

// before
if (authHeader) return authHeader; // Already includes "Bearer " prefix

// after
if (authHeader) return authHeader.replace(/^Bearer\s+/i, '');

JSDoc updated to remove the contradictory "requires a ******" statement.

scripts/mcp-setup.sh — robust case-insensitive strip via sed:

export MCP_AUTH_TOKEN="$(printf '%s' "$GW_KEY" | sed 's/^[Bb][Ee][Aa][Rr][Ee][Rr][[:space:]]*//')"

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.