1.3.0

Hardening release focused on install safety and reliability.

• Validate remote plugin IDs before using them as folder names, closing a path-traversal risk.
• Refuse to let one repository silently take over a plugin ID that was installed from another.
• Download all release files before writing anything to disk, so a failed download never leaves a half-installed plugin.
• Resolve the plugins folder from the vault's configured directory instead of hardcoding .obsidian.
• Add an optional GitHub API token setting to raise the update-check rate limit (60 → 5,000 requests/hour).
• Cancel the startup background check when the plugin unloads, and throttle it to once per hour.
• Handle v prefixes and pre-release suffixes in version comparison (1.2.0 > 1.2.0-beta.2).
• Skip plugins with unreadable manifests during vault scans instead of aborting the whole scan.
• Fix the vault scanner flagging GitHub Updater itself after the 1.2.3 ID change.