Fixes and improved test coverage

Path safety for include_yaml and module_name (paths must stay under project_root). Pluglet macros in template context. 95% test coverage in CI. PyPI workflow no longer mutates pyproject.toml (tag must match repo version). Shared utils, Python 3.13 classifier, docs and Dependabot/Zensical tweaks.