card-skill v0.4.0 - WeChat Reading integration

Highlights

• Added an explicit WeChat Reading source adapter for turning highlights, thoughts, and personal reading statistics into card-skill visuals.
• Added sourced poster footers and monthly reading-report guidance while keeping WeChat Reading access opt-in.
• Added first-run runtime setup so Codex plugin installs can prepare Playwright and Chromium from the installed skill directory.

Reliability

• Treats all WeChat Reading responses as untrusted content and keeps credentials and private reading data out of rendered output by default.
• Adds exact-count eval assertions, sparse-report handling, package-mirror checks, and excludes prototypes from published packages.
• Fails early with an actionable runtime setup command when Playwright or Chromium is unavailable.

Verification

• npm test
• npm run smoke
• isolated packaged-install render
• npm pack --dry-run --json
• GitHub CI on Node.js 22 and 24