JS: docx-block-import (DocxBlockSplitter), editor toolbar refactor,
anchored-comment hover preview, mammoth peer dep, XSS hardening.
First npm publish of @ceedcv-maya/shared-editor-react.
PHP: link href validation + XXE mitigation, DocxExporter, editor scaffold.