v1.0.4

Added

• npm run dev, npm run validate, and npm run test:visual scripts with locked development dependencies.
• Project validation for donation config, supporter records, local asset paths, theme hours, and version consistency.
• Playwright visual smoke checks for desktop/mobile home, crypto, and supporters views.
• Release checklist in README.

Changed

• X social config now uses social.x and https://x.com/chilohwei, with runtime fallback for legacy social.twitter.
• CI now runs the shared npm run validate entrypoint.
• Initial WeChat QR is preloaded for faster first paint.
• Supporters navigation stays in the current tab.
• QR image alt text now follows the active payment method.
• Supporter cards have clearer accessible labels and avoid duplicate avatar announcements.
• Pages now use strict-origin-when-cross-origin referrer policy.

Fixed

• Invalid supporter colorIdx values no longer break rendering.
• theme.nightStart and theme.nightEnd correctly preserve valid 0 values.
• Canonical URL injection also adds og:url.