REST API Extension (0.4.7)

• fix: add subtest to cspell word list (9194d3d)
• fix: add missing cspell words to fix spell check CI (63ed5e9)
• fix: move nolint directive inline to satisfy gofmt (e0b882e)
• fix: suppress tparallel on NoRaceCondition test with explanation (9934ebd)
• fix: add godoc to New*Command stubs, use t.Cleanup in concurrent test (eeded69)
• fix: update CI workflows for go1.26.4 and Node.js 22 (e86ae94)
• fix: bump Go to 1.26.4, upgrade x/net to v0.55.0, refresh pnpm lockfile (1765b86)
• fix: address code review findings - constants, flags, security docs, tests (1de4775)
• refactor: DI, table-driven factories, service layer extraction (8ae4795)
• ci: Bump pnpm/action-setup from 5.0.0 to 6.0.8 (b42062f)
• ci: Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (5deef3b)
• deps: Bump @types/node from 25.3.0 to 25.9.0 in /web (81ea352)
• deps: Bump astro from 5.17.3 to 6.3.4 in /web (31c83d7)
• ci: Bump actions/setup-node from 6.3.0 to 6.4.0 (3e1672d)
• ci: Bump actions/cache from 5.0.4 to 5.0.5 (73d556e)
• ci: Bump actions/github-script from 8.0.0 to 9.0.0 (445c6d3)
• fix: quality improvements, perf, a11y, and web refactoring (cc41734)
• test: strengthen assertions, add coverage, and integration tests (b47709d)
• ci: workflow improvements, version alignment, and docs fixes (0d78edc)
• chore(web): remove unused autoprefixer, postcss deps and redundant sr-only CSS (33f92d9)
• fix(ci): prevent script injection via expression interpolation in workflows (e45ef91)
• fix(deps): update Go and Node.js dependencies to latest stable versions (2aad79c)
• ci: Bump codecov/codecov-action from 5.5.2 to 6.0.0 (b7824f8)
• ci: Bump actions/setup-go from 6.3.0 to 6.4.0 (90d4003)
• ci: Bump sigstore/cosign-installer from 3.9.1 to 4.1.1 (b4e5d91)
• ci: Bump anchore/sbom-action from 0.23.1 to 0.24.0 (0d894c9)
• ci: Bump actions/cache from 5.0.3 to 5.0.4 (b884911)
• chore: update registry for v0.4.6 (7820eba)