test(og-image): add compare snapshot + disable origin restriction

- Add baseline snapshot for new compare test case
- Disable restrictRuntimeImagesToOrigin (defaults to [] when strict=true);
  HMAC signing is already sufficient and origin pinning breaks e2e runs
  that hit localhost. All other OG snapshots regenerated identically, so
  takumi rc.17 + nuxt-og-image 6.3.4 don't visibly change rendering.

Author: harlan-zw

nuxt.config.ts

@@ -300,6 +300,9 @@ export default defineNuxtConfig({
       // Strict mode only activates when a secret is present (CI builds without one).
       strict: !!process.env.NUXT_IMAGE_PROXY_SECRET,
       secret: process.env.NUXT_IMAGE_PROXY_SECRET,
+      // HMAC signing is sufficient; origin pinning blocks localhost e2e runs
+      // and adds no meaningful security on top of signed URLs.
+      restrictRuntimeImagesToOrigin: false,
     },
   },