v0.1.3

Builds are now produced, signed and published by CI instead of being uploaded by hand.

Added

• .github/workflows/release.yml — pushing a tag runs npm ci, type-checks, lints, builds, generates a GitHub artifact attestation for main.js, manifest.json and styles.css, and publishes the release. This clears the remaining "release assets lack GitHub artifact attestation" finding.

Verify the build yourself

gh attestation verify main.js --owner Yaki-Blake --repo Yaki-Blake/pin-toggle

Changed

• Version bumped to 0.1.3; manifest.json, versions.json, package.json and package-lock.json are in sync.
• main.js is byte-identical to the 0.1.2 release — only metadata changed.

Full Changelog: 0.1.2...0.1.3