0.5.6-beta.4

Security fixes — no functional changes.

• Critical: shell-quote — quote() failed to escape newlines in .op values (shell injection risk in dev toolchain)
• High: esbuild bumped to 0.28.1 — missing binary integrity verification when fetching binaries

Both are dev-only dependencies and do not affect the plugin users install.