v3.2.11 — CodeQL regex anchor fix + branch protection

[Jovancoding]

What's changed

Security

• CodeQL v4.0.8 — Metadata drift fixes, MCP handshake, CORS #54 fixed — Strengthened example.com placeholder regex in blackboard-validator.ts from /\bexample\.com\b/i to /^.*\bexample\.com\b.*$/im, adding required ^/$ anchors (js/regex/missing-regexp-anchor)
• Branch protection enabled — main branch now protected against force-pushes and deletions
• Scorecard cleanup — Dismissed Maintained, Code-Review, Fuzzing, CII-Best-Practices as won't-fix (solo repo, no team infrastructure required)

Status

• 315/315 tests passing
• All actionable CodeQL alerts resolved
• Published to npm and ClawHub

---

This discussion was created from the release v3.2.11 — CodeQL regex anchor fix + branch protection.