fix(webext): clean web-ext lint — drop unused optional_host_permissions, ignore build.sh/README (ref #532)

web-ext lint: 0 errors, 2 benign warnings (AMO data-collection
declaration is submission-time, tied to the signing follow-up;
service_worker-ignored is the intentional cross-browser pattern).
optional_host_permissions needed FF128 and was unused at MVP.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.github/workflows/build-webext.yml

@@ -32,12 +32,13 @@ jobs:
           node-version: "20"
 
       - name: Lint (web-ext)
-        run: npx --yes web-ext lint --source-dir . --self-hosted
+        run: npx --yes web-ext lint --source-dir . --self-hosted --ignore-files build.sh README.md
 
       - name: Build .xpi (web-ext)
         run: |
           npx --yes web-ext build --source-dir . \
             --artifacts-dir web-ext-artifacts --overwrite-dest \
+            --ignore-files build.sh README.md \
             --filename "secubox-toolbox-webext.xpi"
 
       - name: Upload .xpi artifact

clients/webext-toolbox/manifest.json

@@ -13,9 +13,6 @@
   "host_permissions": [
     "*://*.secubox.in/*"
   ],
-  "optional_host_permissions": [
-    "*://*/*"
-  ],
   "action": {
     "default_title": "SecuBox Cartographie",
     "default_popup": "popup/popup.html",