fix: enable same-origin voice capture (Closes #933)

src/main.py

@@ -1364,7 +1364,7 @@ async def enforce_browser_security_boundary(request: Request, call_next):
     response.headers["X-Content-Type-Options"] = "nosniff"
     response.headers["Referrer-Policy"] = "no-referrer"
     response.headers["Permissions-Policy"] = (
-        "camera=(), microphone=(), geolocation=(), payment=(), usb=()"
+        "camera=(), microphone=(self), geolocation=(), payment=(), usb=()"
     )
     response.headers["X-Frame-Options"] = "DENY"
     if dashboard_auth.mode() == dashboard_auth.OPERATOR_MODE: