0.2.2 — Smaller footprint, same behavior

Marketplace-scorecard hygiene pass. No user-visible behavior change.

What 0.2.2 fixes:

• Drops the builtin-modules npm dep in favor of node:module's built-in builtinModules export (Node 14+)
• Release bundle now ships only the three files Obsidian actually downloads (main.js, manifest.json, styles.css) — LICENSE removed from the asset list, still present in the repo

Deferred to future work (don't block approval):

• GitHub artifact attestations on the release assets — needs a release workflow
• Pinning @codemirror/{state,view} peer-dep versions

Release narrative: changelog/releases/0.2.2.md