fix: resolve CodeQL incomplete-url-substring-sanitization alerts (#33)

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: leMaur

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "livewire-flux-mcp",
-  "version": "2.1.14",
+  "version": "2.1.16",
   "description": "MCP server for Livewire Flux Components documentation",
   "main": "index.js",
   "type": "module",

package.json

@@ -101,10 +101,10 @@ describe('FluxDocumentationServer Integration', () => {
       const response = await global.fetch('https://fluxui.dev/docs');
       const html = await response.text();
 
-      // Verify fixture contains expected links
-      assert.ok(html.includes('https://fluxui.dev/components/button'));
-      assert.ok(html.includes('https://fluxui.dev/components/input'));
-      assert.ok(html.includes('https://fluxui.dev/components/modal'));
+      // Verify fixture contains expected component links (check href attribute to avoid URL substring ambiguity)
+      assert.ok(html.includes('href="https://fluxui.dev/components/button"'));
+      assert.ok(html.includes('href="https://fluxui.dev/components/input"'));
+      assert.ok(html.includes('href="https://fluxui.dev/components/modal"'));
 
       global.fetch = originalFetch;
     });