Collections security policy for iFrames not properly set up for stable versions

[noracato]

Context

We have problems with iFrames being loaded in Collections for some clients. To allow iFrames, ETModel sets its security policy to specifically allow loading from the collections url.

However, for production environments, the collections url is not dynamically set based on the ETM version.

# config/settings/production.yml:l6

collections_url: https://collections.energytransitionmodel.com

Proposed solution

Set the url dynamically thru env vars:

# config/settings/production.yml:l6

collections_url: <%= ENV.fetch('COLLECTIONS_URL', 'https://collections.energytransitionmodel.com') %>