A sturdier embed widget

improvement

The changelog widget got a hardening pass:

  • All text coming from the API (entry types, versions, project names) is escaped before rendering.
  • Accent colors are validated before they touch your page.
  • Auto theme now follows system light and dark changes reliably.

Nothing changes in how you embed it. The snippet you already have keeps working.