add avatar resource domain

Author: tommaso-moro

pkg/github/ui_resources.go

@@ -20,6 +20,16 @@ func RegisterUIResources(s *mcp.Server) {
 		},
 		func(_ context.Context, _ *mcp.ReadResourceRequest) (*mcp.ReadResourceResult, error) {
 			return &mcp.ReadResourceResult{
+				// MCP Apps UI metadata - CSP configuration to allow loading GitHub avatars
+				// See: https://github.com/modelcontextprotocol/ext-apps/blob/main/specification/draft/apps.mdx
+				Meta: mcp.Meta{
+					"ui": map[string]any{
+						"csp": map[string]any{
+							// Allow loading images from GitHub's avatar CDN
+							"resourceDomains": []string{"https://avatars.githubusercontent.com"},
+						},
+					},
+				},
 				Contents: []*mcp.ResourceContents{
 					{
 						URI:      GetMeUIResourceURI,