General Website Widget Pack

# Changelog

## 1.0.3
- Added required root package `slug` for current Core manifest validation.
- Added/normalized widget-level slugs for contained widgets.
- Revalidated flat ZIP root, JSON descriptors, PHP syntax, and archive integrity.

## 1.0.2
- Fixed Store/Core package detection by placing a recognized `widget.json` at the ZIP root.
- ZIP now has a flat package root instead of an extra enclosing directory.
- Added root `widget.php` compatibility registry for contained widgets.
- Added installer metadata listing every contained widget path.
- Added release QA for root-package detection.

## 1.0.0 — 2026-08-17

### Added
- Current Weather / Forecast.
- Clock & Date.
- Generic Countdown.
- Quote Rotator.
- Number Counter.
- Progress / Goal Meter.
- QR Code.
- Share Page.
- Back to Top.
- Sunrise / Sunset.
- Pack-level and per-widget author/developer provenance metadata.
- User documentation.
- Developer guide.
- “Build Your First DivisionDesk Widget: Countdown” reference tutorial.
- Release-gate QA script and checks.

### Compatibility
- Targets DivisionDesk Core 3.7.0+ and PHP 8.1+.
- No Membership Manager, Events, Finance, Articles, organization-hierarchy, or other future-module dependency.

## 1.0.1 — Security architecture rebuild
- Rebuilt all widgets around namespaced anonymous object scope; loose helper functions removed.
- Established hard prohibition on shared/global mutable widget state for third-party development.
- Added explicit trust model: package metadata cannot self-grant Official/Trusted status; local admin policy may downgrade/disable trust.
- Added Package Security Policy and Trust/Store guidance Help documents.
- Added future Store upvote/downvote guidance as reputation only, never a replacement for security review.
- Removed QR widget dependency on ambient `$_SERVER`; current page URL is accepted only through explicit widget context.
- Added security-policy QA validator.