Stamp 2.55.0 after Next config and CSP overlay rewrite.

package.json stays inherited. Legal markdown and changelog remain in dependency.

periscope/dependency/frontend/content/changelog.md

@@ -2,6 +2,14 @@
 
 What's new in Periscope.
 
+## 2.55.0 — 2026-09-20 — Native Next overlay config and CSP seam
+
+`next.config.ts`, ESLint/PostCSS/tsconfig, and `lib/csp-hosts.ts` overlay from `periscope/src/frontend`. `backend/middleware/__init__.py` is a native package marker. JWT stays in inherited `middleware/auth.py`. `package.json` unchanged. Legal markdown already Periscope; changelog kept. Pad≠Via unchanged.
+
+- [New] Next CSP/redirect/pdfjs overlay rewrite; login still maps to `/sign-in`.
+- [New] CSP host lists stay empty for Clerk/Stripe on self-host.
+- [New] Middleware package marker rewrite; auth module not re-exported.
+
 ## 2.54.0 — 2026-09-20 — Native leftover frontend widgets and tokens
 
 PDF sheet, theme provider/toggle, file drop zone, reviewed-finding hooks, and `globals.css` are original Periscope code in `periscope/src/frontend`. Inherited copies stay on disk. shadcn, Clerk, billing, Reddit pixels, `proxy.ts`, and auth/JWT are unchanged. Pad≠Via unchanged.

periscope/src/frontend/src/lib/version.ts

@@ -1,3 +1,3 @@
 /** Stamped from content/changelog.md by scripts/sync-version.mjs. */
-export const APP_VERSION = "2.54.0";
+export const APP_VERSION = "2.55.0";
 export const APP_VERSION_DATE = "2026-09-20";