Work Objects embeds require the slack-mcps.com frame ancestor

Your Work Objects embed pages must now allow https://*.slack-mcps.com in their Content-Security-Policy frame-ancestors directive. Before, this origin was described as needed only for mobile clients. Embeds fail to load if any of the three required origins is missing:

Content-Security-Policy: frame-ancestors https://*.slack.com https://*.slack-gov.com https://*.slack-mcps.com

See required configurations for details.