This is cool! I'd love if you could explain the issues you had with CSP and serving content.
I was just tinkering around with MCP Apps the other day, and I had a really hard time serving images (this is for rendering in VSCode Copilot). Did you serve static resources through resource endpoints in the mcp server, or via another mechanism?