fix(security): escape plugin-card author field

The wordpress.org API author field was echoed unescaped while every
sibling field was escaped. Run it through wp_kses_post (preserves the
intended anchor markup, strips scripts/handlers).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: Soare-Robert-Daniel

inc/render/class-plugin-card-block.php

@@ -56,7 +56,7 @@ public function render( $attributes ) {
 							</div>
 							<div class="o-plugin-cards-info">
 								<h4>' . esc_html( $results->name ) . '</h4>
-								<h5>' . $results->author . '</h5>
+								<h5>' . wp_kses_post( $results->author ) . '</h5>
 							</div>
 							<div class="o-plugin-cards-ratings">
 								' . $this->get_ratings( $results->rating ) . '