- styles.css: switch `text-decoration` shorthand to `text-decoration-line`
longhand (silences Obsidian 1.9.12 partial-support warning).
- vault enumeration: replace `vault.getFiles()` + path-prefix filter in
3 call sites (settings.ts, inlineTaskWatcher.ts, taskStore.ts) with
a new `getMarkdownFilesInFolder(app, folderPath)` helper using
`Vault.recurseChildren` scoped to the configured task folder. The
plugin no longer enumerates the full vault — clears the scorecard
"Vault Enumeration" finding.
- add `.github/workflows/release.yml` invoking
`actions/attest-build-provenance@v2` so release assets carry
GitHub-signed build attestations.
- commit `package-lock.json` for reproducible CI builds. This also
unblocks Obsidian's automated build verification + malware scan.
- fix two preexisting `ReturnType<typeof setTimeout>` vs
`activeWindow.setTimeout` (`number`) type mismatches surfaced by
tsc --noEmit (settings.ts + taskView.ts).
Co-authored-by: Isaac
