NEW in 1.1.3
- Permanent Firefox install via self-hosted signing (new sign.sh, run as npm run sign)
- Real Firefox e2e regression test (test/e2e.firefox.js, npm run test:firefox)
- Added host_permissions: ["<all_urls>"] to the manifest (needed for content scripts to run across
sites in Firefox)
- e2e harness can target a built/downloaded package via RF_EXT

CHANGED
- The core Firefox fix: detector.js now attaches the engine to window.RedFlagDetector AND
globalThis.RedFlagDetector. Firefox runs content scripts in an isolated sandbox where top-level this
isn't the page window, so the old root.RedFlagDetector assignment was unreachable from content.js —
that was the "not working in Firefox" root cause.
- build.sh keeps dist/stage/ for sign.sh; README documents temporary vs permanent install
- Flaky chromium e2e navigation and README signing docs fixed