feat(entitlement): add client-side entitlement layer and feature-flag system

app/manifest.json

@@ -4,14 +4,14 @@
   "short_name": "Optia",
   "description": "Analyze page SEO and get AI-powered recommendations",
   "version": "0.1.0",
-  "minimum_chrome_version": "116",
+  "minimum_chrome_version": "137",
   "icons": {
     "16": "icons/icon-16.png",
     "32": "icons/icon-32.png",
     "48": "icons/icon-48.png",
     "128": "icons/icon-128.png"
   },
-  "permissions": ["tabs", "sidePanel", "storage", "scripting"],
+  "permissions": ["tabs", "sidePanel", "storage", "scripting", "alarms"],
   "host_permissions": ["<all_urls>"],
   "background": {
     "service_worker": "src/background/service-worker.ts",

app/package.json

@@ -22,6 +22,7 @@
   "dependencies": {
     "canvas-confetti": "^1.9.4",
     "clsx": "^2.1.1",
+    "jose": "^6.2.3",
     "lucide-react": "^0.511.0",
     "openai": "^4.97.0",
     "react": "^19.1.0",

app/pnpm-workspace.yaml

@@ -1,3 +1,6 @@
+allowBuilds:
+  esbuild: true
+  sharp: true
 # Approve the dependencies allowed to run install/build scripts during
 # `pnpm install` (pnpm blocks dependency build scripts by default). This is
 # pnpm v10's documented mechanism — https://pnpm.io/settings#onlybuiltdependencies