v1.0.1

Cache-friendly embeds via admin-ajax signing.

Shortcodes output a placeholder; embed.js fetches a fresh signed iframe URL per visit so full-page cache does not serve expired exp/sig values.

Co-authored-by: Cursor <cursoragent@cursor.com>