Scolta 1.0.0-rc3

Fixed

• expand_primary_weight now correctly weights original vs. expansion results (via updated scolta.js copy from scolta-php). See scolta-php#86.
• Fix phpcs:ignore sniff names to match PCP plugin checker (Squiz.PHP.DiscouragedFunctions.Discouraged, Generic.PHP.ForbiddenFunctions.Found)
• PCP distribution build: zero errors, zero warnings. Updated readme.txt Tested up to 6.9 (WordPress 6.9 released). Updated phpcs:ignore sniff names to match PCP's bundled WPCS version: proc_open now uses WordPress.PHP.DiscouragedPHPFunctions.system_calls_proc_open; ini_set() now uses WordPress.PHP.DiscouragedPHPFunctions.runtime_configuration_ini_set. Converted uninstall.php filesystem cleanup to use WP_Filesystem unconditionally (no raw-rmdir fallback) — WordPress is fully bootstrapped during plugin deletion. Added WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare to tracker's phpcs:disable block covering dynamic IN ({$placeholders}) construction.
• composer.json now uses a VCS repository for tag1/scolta-php instead of a local path reference. The path reference (../scolta-php) only resolved inside the monorepo dev layout; standalone clones (wordpress.org reviewers, demo sites, CI) received a Composer error. Switched to type: vcs pointing to GitHub. composer.lock is deleted and added to .gitignore — consumers generate their own on composer install.
• Final WordPress Plugin Check (PCP) cleanup for zero-warning wordpress.org submission. Updated readme.txt Tested up to 6.8. Sanitized $_SERVER superglobals in get_client_ip() using sanitize_text_field() + wp_unslash(). Added phpcs:ignore / phpcs:disable blocks for legitimate DirectDatabaseQuery patterns across six files (scolta.php, class-scolta-tracker.php, cli/class-scolta-cli.php, uninstall.php, class-scolta-content-gatherer.php, class-scolta-rest-api.php). Added phpcs:ignore for intentional apply_filters('the_content', ...) core hook usage. Added phpcs:disable block for $_ENV/$_SERVER API key detection (server environment variables, not user input).
• Documentation now clearly attributes Scolta to Tag1 Consulting with links to tag1.com and Tag1's AI consulting services in both README.md and readme.txt. Added an "About Tag1 Consulting" section to both documents.
• WordPress Plugin Check (PCP) compliance for wordpress.org submission. Added readme.txt with required metadata headers (Stable Tag, Tested up to, License, License URI). Created .distignore and .gitattributes to exclude dev/test files from release ZIPs. Removed Domain Path header (no translation files). Prefixed $autoloader global in scolta.php. Fixed uninstall.php: prefixed local variables, used esc_sql() for DROP TABLE, replaced unlink() with wp_delete_file(). Replaced strip_tags() with wp_strip_all_tags() in content source. Added targeted phpcs:ignore for legitimate CLI uses of ini_set(), proc_open(), shell_exec(), and direct filesystem functions. Added phpcs:ignore to error_log() calls already guarded by WP_DEBUG. Updated release ZIP directory from scolta-wp/ to scolta/ to match the plugin slug.