v0.1.10 — PowerShell and repository hardening

Fixed

• Recognize PowerShell commands that use the & call operator with quoted Codex executable paths while preserving the configured shell command unchanged.
• Clarify shell-specific Windows configuration examples and the issue-report version prompt.

Added

• Add a deterministic GitHub social preview and regression coverage for release metadata and repository-only packaging.

Changed

• Refine the GitHub and Marketplace presentation with direct installation links, a quick start, visible trust boundaries, and an explicit compatibility matrix.
• Remove unverified Cursor and Windsurf compatibility claims from Marketplace metadata.
• Document signed-tag creation and verification for future release environments with a configured signing key.

Security

• Update transitive development dependencies to resolve the fast-uri, js-yaml, and undici advisories in the packaging toolchain.
• Preserve Workspace Trust enforcement, machine-scoped CLI configuration, bounded missing-command diagnostics, and no output capture for custom commands.

Verification

• 41 tests passed with no failures or skips.
• The VS Code 1.103.0 Extension Host smoke test passed.
• CI passed on Windows and Ubuntu; CodeQL passed.
• npm audit reports zero vulnerabilities and GitHub reports zero open Dependabot alerts.
• The VSIX contains 14 files and excludes sources, tests, workflows, .github/, source maps, and local artifacts.
• VSIX SHA-256: 272DDAC4520070777BF411B92769F3FBD784E03F1E99494C711A7AC60426C3E2.

Marketplace and Open VSX publication remain owner-managed.