main
chore: code quality, security hardening, and infrastructure improvements
fix: export filename extension bug, add dev scripts, harden CI