Add required host_permissions for Klipy and GIPHY APIs

The Klipy migration removed the api.giphy.com host permission from the
manifest but didn't add an equivalent for api.klipy.com. With no required
host permission for the GIF API endpoints, content-script fetches from
github.com are blocked unless the user opts in to the optional
<all_urls> toggle (off by default in Firefox), causing a "Something went
wrong" error on install/update.

Restore host_permissions for both api.klipy.com (default provider) and
api.giphy.com (optional fallback when the user supplies their own key
via the options page) so search works out of the box.

Made-with: Cursor

Author: N1ck

src/manifest.json

@@ -23,6 +23,10 @@
     "activeTab",
     "storage"
   ],
+  "host_permissions": [
+    "https://api.klipy.com/*",
+    "https://api.giphy.com/*"
+  ],
   "optional_host_permissions": [
     "http://*/*",
     "https://*/*",