v1.3.0

v1.3.0 — Production Pass endpoints

Production Pass: the deterministic deployed->production-ready hardening pass
the store-drop-skill runs once per fresh install.

- POST /permalinks                pretty permalinks + flush rewrites
- POST /media/disable-thumbnails   zero core media sizes (Woo/Kadence sizes intact)
- POST /litespeed/optimize-images  enable LSCWP image optimization + WebP
- POST /spam-protection            FF honeypot + login-lockdown
- POST /production-pass            orchestrate all four

All idempotent; snapshot prior state before destructive writes (rollback-able).