fix: restore broad install-time host access so userscripts run on ins…

…tall

Reverts the Chrome manifest from optional_host_permissions back to
host_permissions: [<all_urls>] and flips the scopedHostPermissions gate to
opt-in (default off). The scoped model (commit 860fd3d) stranded scripts
behind 'Site Access Needed' and unregistered broad-match scripts with
'Broad host access requires explicit per-script opt-in'. Adds a one-time
migration that clears a persisted scopedHostPermissions=true so existing
installs pick up the new default. Firefox behavior is unchanged.

ScriptVault v3.19.1

ScriptVault v3.19.0

chore: release v3.17.0

Session: enforce SRI Require mode, scam/crypto-drain detector, one-click
restrict-to-site + @match validation, SettingsManager write-race fix, cloud
backup no longer clobbers the sync envelope (+E2EE), Easy Cloud merge parity,
and gzip-compressed backup blobs.

chore: release v3.16.0

Deep audit pass — security (GM handler auth binding, attribute-injection XSS),
data safety (sync tombstone resurrection, trash-restore ordering, backup-import
settings), and correctness (Chrome-as-Firefox misdetection, editor keystroke/
cursor, quota bar, Find pagination). Full detail in CHANGELOG; deferred findings
in ROADMAP under Deep Audit Findings.

fix: editor screen unusable under sticky header; redesign editor nav

v3.15.0 shipped the full-screen editor at z-index 50 while the sticky
dashboard header sits at 100, painting the inert header over the
Save/Close row. The overlay now stacks at 200 (chrome < editor < modals).

- [hidden] editor action/toolbar buttons actually hide now (author
  display rules were defeating the UA [hidden] style; Preview CSS
  showed on JS scripts).
- Editor nav merged into a single band: panel tabs left, icon-only
  tools with tooltips right; removed the legacy dashboard.css rule
  that right-aligned the tabs. Code pane now ~91% of the viewport.
- Save button accented, filled while dirty.
- New smoke:editor harness opens the real editor in headless Chromium,
  hit-tests every control via elementFromPoint, checks code-pane share,
  screenshots, and closes — layering bugs fail loudly now.

feat: full-screen editor, instant new script, dashboard UX fixes

- Editor overlay covers the full viewport with a slim single-row header;
  eyebrow/subtitle hidden (summary moves to the title tooltip), panel-tab
  and toolbar rows tightened for maximum code-pane height.
- New Script skips the template picker and opens a blank editor directly;
  dead picker templates and CSS removed (starters live in the template
  manager).
- Fix doubled tab labels: setLabelPreservingDecor skips [data-i18n]-owned
  labels and the redundant tab entries left the i18n text-target map.
- No success toast on theme switches (theme editor apply + layout/editor
  theme settings).
- Hide the empty open-editors tab group instead of rendering a stray pill.
- Move the CSP-blocked inline dir bootstrap to pages/page-dir.js so RTL
  direction is actually applied; dashboard smoke is console-clean.

v3.11.0 — Storage rollback hardening + Phase 38 parity wave

Release v3.10.1 - Polish-of-polish: tokenise diff view, feature badge…

…s, toolbar buttons, modal close

- Feature badges (.feature-storage/.feature-xhr/.feature-style/.feature-notify/.feature-menu/.feature-unsafe) now reference --tint-*-soft tokens. Re-tint correctly in light/catppuccin themes instead of staying dark-mode-only.

- Diff view: .diff-add/.diff-del backgrounds use --tint-green/red-soft; counts and signs use var(--accent-green/red). Hardcoded #4ade80/#f87171 removed.

- .toolbar-btn: tokenised transitions, hairline border on hover, 0.5px press-down on :active. Tactile feel.

- .modal-close: 28x28 hit target with rounded hover background instead of bare floating x.

- 601/601 green; CSS-only.

Release v3.10.0 - Premium UX polish (design tokens, multi-theme dashb…

…oard, refined components)

Pure CSS pass on pages/dashboard.css plus version sync. No HTML/JS changes.

- Token layer at top: --hairline, --shadow-*, --r-*, --t-*, --ease-*, --focus-ring, --tint-*-soft/edge. Theme-aware via [data-theme=light|catppuccin|oled]; color-scheme declared.

- Dropped neon-green slabs: th lost 2px green underline, .section-label lost 3px green right-bar. Active tabs now use a 2px ::after indicator strip.

- Tables: hairline-shadow rows, accent-blue rail on .selected. Toggles: inner border on OFF, knob shadow, spring easing on knob. Toasts: variant-tinted background + 3px accent stripe. Modals: backdrop-blur scrim, spring scale-in, --shadow-lg.

- Spinner 28-> 24px, slower. Scrollbars 10px transparent-track / pill-thumb. Snippet-item hover replaced translateX trick with calmer accent-stripe.

- New end-of-file polish layer: system-wide :focus-visible ring, ::selection styling, tabular-nums on numeric columns, elevation on .modal/.cmd-dialog.

- All legacy CSS variables preserved -> dashboard-theme-editor.js, inline [data-theme] blocks in dashboard.html, and dashboard JS continue to work without touch.

- Updated tests/dashboard-modules.test.js to assert the new tokenised transitions instead of the old literals. 601/601 green.