Fix XSS in Markdown renderer + packaging hygiene#2

Open

patricktr wants to merge 3 commits into

victoriaplummer:mainfrom

patricktr:security-hardening

Commits on May 3, 2026

Fix XSS in Markdown renderer and harden AttachmentPreview

patricktr
and
claude
committed
Fix package.json paths and tighten publish hygiene

patricktr
and
claude
committed
Point repository.url at the canonical upstream repo

patricktr
and
claude
committed