v1.0.2 — transcript fix, dependency upgrades

What's Changed

Fixes

• Transcript language now works (fixes #19): the language parameter was accepted but never passed to the fetch call; youtube-transcript upgraded 1.0.6 → 1.3.1 with upstream fixes for YouTube changes. Errors now list the languages actually available for a video.

Dependencies

• googleapis 129 → 173 — npm audit is now clean (was 4 moderate findings via a vulnerable uuid)
• Removed ytdl-core — it was never part of the compiled output

Internal

• Server version is read from package.json instead of hardcoded strings
• CI now runs a build + STDIO smoke test on every push and PR
• Releases publish to npm automatically via trusted publishing

Full Changelog: v1.0.1...v1.0.2