fix(extension): drop unused scripting+activeTab permissions (store rejection)

Chrome Web Store rejected v0.1.0: 'scripting' requested but unused. The
content script is statically declared via content_scripts, and the popup's
sendMessage is covered by host_permissions, so neither scripting nor activeTab
is needed. Narrow permissions to ['storage'] only, bump to v0.1.1, rebuild,
refresh the downloadable zip, and update the privacy page + publishing notes.

Author: mayur-tolexo

extension/PUBLISHING.md

@@ -48,8 +48,6 @@ Free, like the rest of shoplit. Sign up at https://shoplit.in
 `Add a product from a supported retailer's page to the user's shoplit cart.`
 
 **Permission justifications:**
-- **activeTab** — Read the product on the page the user is currently viewing, only when they click the extension.
-- **scripting** — Extract the product details (title, image, price, link) from the active product page when invoked.
 - **storage** — Store the user's shoplit connection token locally so they stay signed in.
 - **host permission — retailer sites** (amazon, myntra, nykaa, flipkart, ajio) — Show the "Add to shoplit" button and read the product on supported shopping sites.
 - **host permission — shoplit.in** — Call the shoplit API to list the user's carts and add the product.

extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "shoplit — add to cart",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Add any product to your shoplit cart from Amazon, Myntra, Nykaa, Flipkart, AJIO.",
   "homepage_url": "https://shoplit.in",
   "icons": { "16": "icons/16.png", "48": "icons/48.png", "128": "icons/128.png" },
@@ -11,7 +11,7 @@
     "default_icon": { "16": "icons/16.png", "48": "icons/48.png", "128": "icons/128.png" }
   },
   "background": { "service_worker": "service-worker.js", "type": "module" },
-  "permissions": ["activeTab", "scripting", "storage"],
+  "permissions": ["storage"],
   "host_permissions": [
     "https://shoplit.in/*",
     "https://*.nykaa.com/*",

web/app/(public)/legal/extension-privacy/page.tsx

@@ -42,7 +42,6 @@ export default function ExtensionPrivacyPage() {
 
         <h2 className="font-serif text-2xl mt-8 mb-2">Permissions, explained</h2>
         <ul className="leading-relaxed text-ink list-disc pl-5 space-y-1">
-          <li><strong>activeTab / scripting</strong> — read the product details of the page you&apos;re on, when you invoke the extension.</li>
           <li><strong>storage</strong> — keep your connection token so you stay signed in.</li>
           <li><strong>host access (retailer sites)</strong> — show the &ldquo;Add to shoplit&rdquo; button and read the product on supported shopping sites.</li>
           <li><strong>host access (shoplit.in)</strong> — call the shoplit API to list your carts and add the product.</li>