Stop committing built files: scripts/build.mjs bundles src/ with
esbuild (replacing webpack) and writes the complete extension to
dist/. The Build workflow runs it on every push and PR, uploads dist/
as an artifact, and publishes a release zip for v* tags that match the
manifest version. package-lock.json is now committed for npm ci.
Replace the cardboard image, which wasn't openly licensed, with Tabler
Icons' "cardboards" outline (MIT): white in the YouTube player, and on
a blue tile for the extension icons (16-128px).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>