If you were working off “localhost” during “localtest” rather than a Real domain, then the CSP cannot be applied, as thats jsut how it works
Not sure what you mean here, all extension files in hosted or live test are served from https://extensionClientId.ext-twitch.tv/extensionClientID/version/hash/and thus any ajax call should have that as the origin (when it hosted test or release)
All JS/CSS/HTML/static content should be served from the Twitch CDN to prevent you changing what/how an extension does what it does. And so Twitch can verify/validate the functionality is in line with the guidelines, that doesn’t work if you can change the JS at will
Currently it takes as long as it takes to from from submission to release, it depends how long the review queue is.