- README Release section now matches CI reality: tag push publishes to the
Gitea npm registry AND creates the Gitea release (was described as
visibility-only, predating the npm publish step).
- ESLint flat config (eslint + typescript-eslint recommended); `npm run lint`
is now eslint (typecheck stays separate) and CI build-and-test gates on it.
One real finding fixed: dead import in src/mail/index.ts.
- New vitest coverage for the previously untested src/browser/actions.ts
(click/fill retries, safeGoto, waitForUrlHost, assertPublicHost, BasePage
URL building) and src/logging/redact.ts (redactSecrets).