pub fn validate_font_css_url(url: &str) -> Result<(), AuthError>
Validate a font CSS URL. Must be an HTTPS URL (no loopback exception — production asset URL).