v3.6.0.0

What's Changed

• v3.5.1.0 fix: repair the landing-page guard and the mutation harness that hid its holes by @savvides in #85
• docs(web): note the v3.5.1.0 patch on the What's New card by @savvides in #86
• 🔒 Fix reverse tabnabbing vulnerability in sidepanel link by @savvides in #83
• 🔒 Fix: Prevent API key leak by using secure header authentication by @savvides in #81
• ⚡ Optimize feedback button query in sidepanel by @savvides in #82
• 🧹 [code health] Extract chrome.tabs listener callbacks by @savvides in #77
• ⚡ [Performance] Fix double initialization of Date in dossier-compiler by @savvides in #76
• ⚡ Optimize word count extraction performance by @savvides in #75
• 🧪 Add error path test for Canvas crawler fetch failure by @savvides in #74
• 🧪 test: Add missing error path coverage for crawlCanvasCourse by @savvides in #80
• Fix YAML frontmatter validation regex for strict match by @savvides in #79
• fix(ci): move linter workflow into .github so GitHub actually runs it by @savvides in #87
• fix(ci): pass the release tag through env so actionlint can lint release.yml by @savvides in #88
• feat: integrate Consensus API evidence engine, pre-response QA gate, and BYOK settings by @savvides in #89
• Fix code-review findings in the Chrome extension and test harness; release v3.6.0.0 (extension 1.1.0) by @savvides in #109

Full Changelog: v3.5.0.0...v3.6.0.0