chore: quality review fixes + maintenance auto-close (#18)

* fix: correct WXT/Plasmo URLs, dev dep count, setup checklist paths

- README.md/ko.md: WXT and Plasmo links pointed to a non-existent
  'nicedayfor' org (404). Now point to wxt-dev/wxt and PlasmoHQ/plasmo.
- README dep count said "5 dev" but package.json has 7 devDependencies.
  Updated to "7 dev" in both language versions.
- setup.yml template-checklist issue referenced wrong paths: 'icons/',
  'popup/', and 'tests/'. Aligned with actual layout: 'assets/icons/',
  'src/popup/', and 'src/**/*.test.js'.
- Add Python MCP Server to the Related Starters list; bold current.

* chore: npm audit fix for high-severity transitive vulnerabilities

The Security Audit CI step has been failing on main since at least
2026-04-04 due to high-severity advisories in transitive dependencies:
flatted, node-forge, picomatch, brace-expansion.

'npm audit fix' regenerates package-lock.json to pull in the patched
versions. Moderate vulns in web-ext's ajv chain remain (only fixable
via --force which would bump web-ext to a breaking version); CI uses
--audit-level=high so those don't block.

* ci: close maintenance issue when CI is green

The existing open-issue-on-failure job opened a `maintenance`
labeled issue whenever the weekly CI run broke, but there was no
counterpart job to close that issue once the underlying problem
got fixed. As a result the 12 starters accumulated stale open
issues that made the repos look broken to outside visitors even
after every fix had landed.

The new close-issue-on-success job runs whenever the re-triggered
CI is green, lists all open issues with the `maintenance` label,
leaves a comment linking back to the resolving run, and closes
them. Future regressions will reopen a fresh issue, so no signal
is lost.

Author: heznpc

.github/workflows/maintenance.yml

@@ -48,3 +48,47 @@ jobs:
                 `---\n_Opened automatically by the Maintenance workflow._`,
               labels: ['maintenance'],
             });
+
+  close-issue-on-success:
+    needs: ci
+    if: success()
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            // Close any open maintenance issues — the most recent CI run
+            // proves the underlying problem is resolved. Without this job
+            // the issues opened by `open-issue-on-failure` linger forever
+            // and the repo looks broken to outside visitors even after the
+            // fix lands.
+            const open = await github.rest.issues.listForRepo({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              state: 'open',
+              labels: 'maintenance',
+            });
+            if (open.data.length === 0) {
+              console.log('No open maintenance issues to close.');
+              return;
+            }
+            const run = await github.rest.actions.getWorkflowRun({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              run_id: context.runId,
+            });
+            for (const issue of open.data) {
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: issue.number,
+                body: `Maintenance CI is green again — closing automatically.\n\n**Run:** ${run.data.html_url}`,
+              });
+              await github.rest.issues.update({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: issue.number,
+                state: 'closed',
+              });
+              console.log(`Closed issue #${issue.number}`);
+            }