Version 0.3.0

Security hardening for the console-capture channel:

• Console log forwarding between the page hook (pagehook.js) and the
  content script (content.js) is now authenticated with a per-page-load
  random nonce. Messages without a valid nonce are dropped, preventing
  accidental collisions and low-effort forgery by page scripts.
• The page hook stays silent until it receives the nonce from the
  content script, so no console data is posted before the handshake
  completes.

No new permissions. No data collection (unchanged). The companion local
server (browser-outo CLI) now requires a per-run bearer token, accepts
WebSocket connections from extension origins only, and binds to loopback
by default.