chore(master): release 0.5.0

[github-actions]

🤖 I have created a release beep boop

0.5.0 (2026-07-29)

Features

• metrics: tag cryptify uploads with X-Cryptify-Source: outlook (#96) (5629fa5)
• show decrypted email in a popup dialog instead of the taskpane (#110) (588b9ae)

Bug Fixes

• compose: enforce values on required decryption attributes (#57) (#92) (928d925)
• dialog client-version header uses pg4ol and live package version (#105) (5300dc4), closes #103
• escape single quotes in Graph OData $filter (OData injection) (#119) (355a960)
• point Cryptify at storage.postguard.eu, not the dead fileshare host (#133) (2e9acc4), closes #132
• read-view: ensure decrypted body meets WCAG 2.2 AA contrast (#58) (#109) (1f7ea91)
• security: stop leaking stack traces into user-facing UI (#113) (#120) (dac4e9f)
• settings: gate prefill PII console.log behind non-production check (#118) (7f47df0)
• sync From-address selector to encrypt flow (#90) (c4ca35c)
• yivi-dialog: guard encryption callbacks against silent/leaked throws (#108) (d413cf5), closes #78

---

This PR was generated with Release Please. See documentation.

[dobby-coder]

Release-please PR looks correct:

• Version bump 0.4.0 → 0.4.1 in package.json, package-lock.json, and manifest
• Changelog entry accurately reflects the single bug fix landed since v0.4.0 (commit 928d925, fix(compose): enforce values on required decryption attributes)
• No other commits since v0.4.0 needed inclusion

Ready to merge.

[github-actions]

🤖 Created releases:

• v0.5.0

🌻