Astra Deck v4.5.2
Extreme audit hardening cut: narrows local host permissions to 127.0.0.1, hardens popup diagnostics and accessibility audits, improves version/syntax/CI gates, fixes pytest-qt PyQt6 collection reliability, and makes frozen downloader uninstall cleanup safer. Verified with npm test, npm run check, python -m pytest astra_downloader, npm audit --omit=dev, and npm run build:userscript.