chore: integrate production readiness fixes

[ubugeeei]

Summary

This is the final CI gate for the production-readiness batch. The issue-scoped PRs remain open for review context, but their Actions runs were cancelled to avoid consuming the queue.

Includes:

• fix(image): guard raster dimensions #20 fix(image): guard raster dimensions
• fix(core): reject oversized QR matrices #21 fix(core): reject oversized QR matrices
• fix(browser): preserve nullable decoded text #22 fix(browser): preserve nullable decoded text
• fix(cli): reject .wep extension alias #23 fix(cli): reject .wep extension alias
• docs: document production support #24 docs: document production support
• fix(package): include wasm artifacts #25 fix(package): include wasm artifacts
• build: add package metadata #26 build: add package metadata

Closes #1
Closes #2
Closes #3
Closes #4
Closes #5
Closes #7
Closes #10
Closes #16

Local Validation

• pnpm install --frozen-lockfile
• vp run ci

Notes

• Individual PR CI runs were intentionally cancelled because the Actions queue is tight.
• wasm-pack still warns about a missing local LICENSE file in the generated wasm package context; the build completes and package artifact checks pass.
• wasm-pack 0.13.1 reports that 0.15.0 exists; tracked separately as release/tooling follow-up.