fix(firefox): correct publishing and resolve validation warnings

[mortik]

Firefox version creation returned HTTP 400 because release notes were sent as multipart data alongside the source archive. Submit source files first, then update release notes through a separate JSON request. Strict shell failure handling, visible HTTP error bodies, and validation checks prevent failed submissions from appearing successful.

Firefox builds also disable Vue static HTML stringification and replace its unused static-content insertion body with an explicit error. Disabling the compiler optimization alone leaves the innerHTML assignment in the bundle. The build transform checks Vue's AST and fails if the expected implementation changes; Chrome retains its existing compilation and runtime. Vue upgrades may require revisiting this transform.

The Firefox manifest declares the existing Mozilla GUID and required identity, authentication, financial/purchase, and website-content data categories. Minimum Firefox versions are 140 on desktop and 142 on Android so the browser provides built-in data consent. Chrome receives no Firefox manifest fields.

Validation:

• Bash syntax checks, ShellCheck, and mocked publishing success, validation failure, timeout, and HTTP rejection scenarios passed.
• Type checking, all 97 tests, Firefox packaging, and Chrome production build passed. Regression coverage checks large static-template compilation and the production Firefox bundle.
• Mozilla validated the final rebuilt ZIP with zero errors, zero warnings, and zero notices. Validation upload: ffbd2bdb38904b1d9c320ad2261207f7.
• The original 1.4.0 artifacts were submitted successfully as Mozilla version 6577785 and are now publicly listed. The rebuilt ZIP was uploaded for validation only; these changes are for the next release.

🤖