v1.5.0

Changed

• Adopted @simpleworkjs/frontend's app.messages, app.modal, and app.validate modules, replacing the vendored app.util.actionMessage/actionConfirm in public/lib/js/app-base.js and the vendored public/lib/js/val.js. Message content is now HTML-escaped, and app.messages.action falls back to a page-wide toast when there's no inline .actionMessage target. proxy's host/target/hostname wildcard-DNS validation rules (mirroring utils/hostname_validate.js) moved to public/js/app.js, registered via $.validateSettings, since they're proxy-specific and don't belong in the shared package's generic rule set. app.api/app.auth/app.pubsub/app.socket are untouched.