1.3.1

What's Changed

• Add .inc, .module, .phps to blocked extension patterns and BASE_BLOCKED_EXTENSIONS hash map
• Closes double-extension bypass where files like file.inc.png or file.module.gif passed BLOCKED_EXTENSION_PATTERN
• These extensions are server-executable in common web server configurations (Apache, PHP-FPM)
• Updated admin panel blocked extensions display, README, and copilot instructions

Fixes #4