v2.4.1: Reliability & UX fixes

What's fixed
• Media-first posts (image, video, audio, document) can now be registered without forcing you to type a caption first. Caption stays optional when the post itself is the artifact.
• The Register button now shows a clear error message when it can't proceed. The previous silent "click does nothing" behaviour is gone.
• Status messages stay visible at the top of the panel even after you scroll, and the panel auto-scrolls back to the top when a new error appears.
• The toolbar popup now mirrors the in-page panel: clear errors for missing origin selection, URL format validation, and silent-failure protection.

What's improved
• Per-field "Required" vs "(optional)" badges now match exactly what the form will accept. No more "Required" labels on fields that turn out to be optional.
• Title, byline, thread, and wire-source fields are now enforced consistently across the in-page panel and Settings > Label Content.
• Wire adaptations correctly restrict the available origin codes (AA / Mixed only) at the moment you click the origin button, not after submission.

Data safety
• Fixed an edge case where switching the content type after attaching media could carry the previous file's hash into the next registration. Every registration now starts from a clean state.

Internals
• 98 new regression tests covering form validation and stale-state cleanup, so these classes of bug can't recur.
• No new permissions. No new host permissions. No protocol changes, CTIDs from 2.4.0 verify identically.

This release brings TIP Protocol to Firefox with full feature parity with the Chrome extension, plus Firefox-specific improvements required for Manifest V3 on Gecko.

What's new
A new network interceptor runs at document start on Instagram, Facebook, and X. It patches the page's native fetch and XMLHttpRequest to detect TIP Content IDs (CTIDs) embedded in API responses, enabling badge rendering on those platforms even when posts load dynamically through GraphQL rather than standard HTML.

Platform coverage
This release supports badge display and content registration across 300-plus sites, including YouTube, Instagram, TikTok, X, Facebook, LinkedIn, Threads, Reddit, Bluesky, Mastodon, Truth Social, WeChat (Official Accounts and Channels), Weibo, major global newsrooms, academic publishers, and blogging platforms.

Content types
Creators can register text posts, photos, carousels, videos, articles, podcasts, and mixed-media content, with origin declarations of Original Human, AI-Assisted, AI-Generated, or Mixed.

Security
Signing keys never leave your device. Post-quantum cryptography is provided by the audited @noble libraries (ML-KEM, SHAKE-256). All cryptographic operations run locally.