v0.4.0 — Force native view and one annotated image

Added

• Force native view (unsafe) per origin from the panel's ⋯ menu. The proxy accepts that public host only through the explicit f. token, and the panel warns that the page shares DSH's origin.
• One annotated image per Insert. The host renders a viewport screenshot, pins every pick and attaches that single image instead of one tiny crop per annotation.

Changed

• Annotation crop paths stay in the text; the first crop is the fallback image if the composite render fails.
• The README documents the npm install route and uses npm-safe absolute links.

Tests

• Real-Chromium composite smoke (npm run test:composite), native and CDP Insert behavior, and the proxy token/target fence.