3.3.1

Community review patch:

• Resolve settings and CSS review warnings without changing commands or user configuration.
• Use declarative settings rendering, standard headings, and update() refreshes.
• Remove innerHTML and broad CSS :has() selectors.
• Include build-provenance attestations for main.js and styles.css.

This patch supersedes the withdrawn 3.4.0 release.

Validation: ESLint, TypeScript, production build, npm audit, and 46 regression tests pass.