Security Patch

This release removes a hardcoded GitHub access token from the plugin and improves settings sanitization. All sites running this plugin should update.

Changes

Removed GitHub authentication token from plugin code — the repository is now public so no token is required
Added input sanitization to the extensions settings page, ensuring only valid extension slugs can be saved