Harden frontend asset minification:
- Bugfix: Load WordPress file helpers safely for atomic cache writes
- Resolve minified asset sources with realpath before reading
- Restrict minification to allowed asset roots and extensions
- Add filterable asset size, extension, and root limits
- Cover JSX rejection, root rejection, and size-limit behavior in tests