/* ---------------------------------------------------------------------------
   Healthvocate brand fonts — SELF-HOSTED.
   ---------------------------------------------------------------------------
   These were previously pulled from fonts.googleapis.com, which the site's own
   CSP blocks (`style-src 'self' 'unsafe-inline'` and `font-src 'self' data:`).
   The result: Playfair Display and DM Sans never loaded in production and every
   page rendered in fallback fonts.

   Self-hosting is the fix rather than widening the CSP, for two reasons:

   1. No policy change is needed — `font-src 'self'` already allows these.
   2. It removes a third-party request that carried the visitor's IP and the
      page URL to Google on every single pageview. On this product the URL IS
      the health context (/guides/prior-auth implies an insurance denial;
      /rx-optimizer, /medicare likewise), which is exactly the leak the
      consumer-health-data posture exists to prevent.

   Both files are VARIABLE fonts subset to latin — one file per family covers
   every weight the CSS asks for (Playfair 400/600/700, DM Sans 300/400/500),
   replacing what would otherwise be six static files.

   `font-display: swap` keeps text visible during load, matching the behaviour
   of the old Google `&display=swap` parameter.
--------------------------------------------------------------------------- */

@font-face {
  font-family: 'Playfair Display';
  src: url('/assets/fonts/playfair-display-var.woff2') format('woff2-variations'),
       url('/assets/fonts/playfair-display-var.woff2') format('woff2');
  font-weight: 400 900;
  font-style: normal;
  font-display: swap;
}

@font-face {
  font-family: 'DM Sans';
  src: url('/assets/fonts/dm-sans-var.woff2') format('woff2-variations'),
       url('/assets/fonts/dm-sans-var.woff2') format('woff2');
  font-weight: 100 1000;
  font-style: normal;
  font-display: swap;
}