feat(apps): Integrate AppRenderer from @mcp-ui/client SDK (#7013)

ui/desktop/openapi.json

@@ -3751,6 +3751,14 @@
         "type": "object",
         "description": "Content Security Policy metadata for MCP Apps\nSpecifies allowed domains for network connections and resource loading",
         "properties": {
+          "baseUriDomains": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Domains allowed for base-uri",
+            "nullable": true
+          },
           "connectDomains": {
             "type": "array",
             "items": {
@@ -3759,6 +3767,14 @@
             "description": "Domains allowed for connect-src (fetch, XHR, WebSocket)",
             "nullable": true
           },
+          "frameDomains": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Domains allowed for frame-src (nested iframes)",
+            "nullable": true
+          },
           "resourceDomains": {
             "type": "array",
             "items": {