修复构建依赖安全问题 / Update build dependency security

[mediaclzz]

修复内容 / Changes

The 1.5.0 build toolchain contains vulnerable transitive dependencies, and the existing test rejects any web-ext update because it hard-codes 8.10.0. Upgrade the exact web-ext pin to 10.6.0, refresh the lockfile, and check exact-version/lockfile consistency instead. Add a Windows package-build CI job and document outstanding upstream advisories.

升级构建工具及传递依赖，修复阻碍安全升级的版本断言，并增加 Windows 构建 CI。扩展运行代码和版本号保持不变；已发布 v1.5.0 不变。

This includes the dependency fixes attempted in #1 and fixes its failing static audit.

Validation

• npm ci, npm test, npm run build: PASS.
• Firefox 152.0.4/geckodriver integration: PASS.
• All 16 packaged files byte-identical to the published v1.5.0 archive.
• npm audit: 13 package entries reduced to 3 high entries, all from image-size and its parent chain. No patched image-size release currently exists for GHSA-w3rx-r6r6-pgpr / GHSA-5p2g-fcmc-qvqq; this is documented, not suppressed. The linter dependency is not included in the extension archive.