Security hardening + new tools deployment

- Hide Apache version (ServerTokens Prod)
- Add Permissions-Policy header
- Remove deprecated X-XSS-Protection
- Consolidate security headers to .htaccess only (remove duplicates from PHP)
- Deploy free tools: robots-analyzer, data-converter
- Deploy tools announcement blog post
- Update sitemap with new tools and blog post

blog/articles/data-protection-impact-assessments.php

@@ -1,10 +1,6 @@
 <?php
 // Enhanced security headers
-header('X-Content-Type-Options: nosniff');
-header('X-Frame-Options: DENY');
-header('X-XSS-Protection: 1; mode=block');
 header('Strict-Transport-Security: max-age=31536000; includeSubDomains');
-header('Referrer-Policy: strict-origin-when-cross-origin');
 
 // Article-specific SEO variables
 $article_title = "Data Protection Impact Assessments (DPIA): A Complete UK Guide";
@@ -72,6 +68,7 @@ $read_time = 10;
     
     <!-- Styles -->
     <link rel="stylesheet" href="../../assets/css/main.css">
+    <link rel="stylesheet" href="../../assets/css/cro-enhancements.css">
     
     <!-- Critical Button and Spacing Fix -->
     <style>
@@ -284,7 +281,7 @@ $read_time = 10;
         <div class="nav-container">
             <div class="nav-logo">
                 <a href="/">
-                    <img src="../../assets/images/ukds-main-logo.png" alt="UK Data Services" class="logo" loading="eager">
+                    <img loading="lazy" src="../../assets/images/ukds-main-logo.png" alt="UK Data Services" class="logo" loading="eager">
                 </a>
             </div>
             <div class="nav-menu" id="nav-menu">
@@ -525,8 +522,8 @@ $read_time = 10;
                     <h3>UK Data Services</h3>
                     <p>Professional data extraction, analysis, and compliance services for UK businesses.</p>
                     <div class="social-links">
-                        <a href="https://linkedin.com/company/uk-data-services" aria-label="LinkedIn" target="_blank" rel="noopener noreferrer"><img src="../../assets/images/icon-linkedin.svg" alt="LinkedIn"></a>
-                        <a href="https://twitter.com/ukdataservices" aria-label="Twitter" target="_blank" rel="noopener noreferrer"><img src="../../assets/images/icon-twitter.svg" alt="Twitter"></a>
+                        <a href="https://linkedin.com/company/uk-data-services" aria-label="LinkedIn" target="_blank" rel="noopener noreferrer"><img loading="lazy" src="../../assets/images/icon-linkedin.svg" alt="LinkedIn"></a>
+                        <a href="https://twitter.com/ukdataservices" aria-label="Twitter" target="_blank" rel="noopener noreferrer"><img loading="lazy" src="../../assets/images/icon-twitter.svg" alt="Twitter"></a>
                     </div>
                 </div>
                 <div class="footer-section">
@@ -568,5 +565,6 @@ $read_time = 10;
     </footer>
 
     <script src="../../assets/js/main.js"></script>
+<script src="../../assets/js/cro-enhancements.js"></script>
 </body>
 </html>