v1.0.4
Hardening patch (parity with linkedin-skills v1.0.10/v1.0.8 line).
- Security pack: SECURITY.md, HOL plugin-scanner CI workflow, dependabot config, requirements lockfile, .codexignore, and a branded plugin icon wired into the Codex manifest.
- Audit robustness verified: the pre-publish audit was pressure-tested (authority + deadline scenario, platform-adapted AI-tell drafts) and correctly FAILED the bad draft with full blocker lists. No rule gaps found.
- Writers: goal-first selection added where missing (YouTube community post writer, TikTok caption writer in their respective bundles).
No breaking changes. Patch release.