v1.2.4

Security & performance hardening

• Remove unused electron-store dependency — eliminates ~2.7 MB of dead weight from packaged builds
• Async settings persistence — saveSettings now uses fs.promises.writeFile to avoid blocking the main process
• Enable renderer sandboxing — sandbox: true on both windows for reduced memory footprint and stronger process isolation
• IPC input validation — settings:set handler validates types and clamps numeric ranges
• Tighten CSP — remove 'unsafe-inline' from style-src in both HTML files
• Preload listener cleanup — on() returns a dispose function to prevent listener accumulation