Strip emoji from docs, fix XSS/hashing vulnerabilities, remediate all failing CI checks (#1)

* Initial plan

* Fix security vulnerabilities: MD5→SHA-256, XSS via dangerouslySetInnerHTML/innerHTML, insecure randomness, CodeQL config

Co-authored-by: TLimoges33 <125313326+TLimoges33@users.noreply.github.com>

* Clean up README: remove decorative emojis for a professional tone

Remove all emojis from section headers, list item prefixes, and
decorative positions. Replace ✅ phase status markers with '(Complete)'
text. Keep the ⭐ in the final call-to-action line. No changes to
links, badges, code blocks, or technical content.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: remove emoji characters from CONTRIBUTING.md

Remove all emoji from section headers and closing line while
preserving links, code blocks, and technical content.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: remove emoji characters from documentation files

Remove all emoji characters from 8 documentation files in docs/.
Replace status-marker checkmarks (✅) with '(Done)' text.
Remove decorative emojis from headers and body text entirely.
Preserve emojis inside code blocks unchanged.
Clean up trailing whitespace introduced by removals.

Files modified:
- DEPLOYMENT_GUIDE.md
- IMPLEMENTATION_PLAN.md
- MILESTONE_6_SUMMARY.md
- PRODUCTION_ROADMAP.md
- PROJECT_STATUS.md
- REPOSITORY_ENHANCEMENT.md
- ROADMAP.md
- SECURITY_AUDIT_ROADMAP.md

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: remove emoji characters from documentation files

Remove all emoji characters from 9 markdown files while preserving
code block content (box-drawing characters, indentation). Emojis
removed from headers, list items, and body text across READMEs,
issue templates, PR template, runbook, and mobile docs.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Remove excessive emoji from all documentation for professional presentation

Co-authored-by: TLimoges33 <125313326+TLimoges33@users.noreply.github.com>

* Fix PluginWidget initial state and remove || true from security audit steps

Co-authored-by: TLimoges33 <125313326+TLimoges33@users.noreply.github.com>

* Remediate all failing CI checks: update deprecated actions, fix npm vulnerabilities, fix migrations YAML

Co-authored-by: SynOSdev <257853113+SynOSdev@users.noreply.github.com>

* Fix all remaining CI failures: Node 18→20, fix test API contract, fix pytest version, fix Postgres health checks

Co-authored-by: SynOSdev <257853113+SynOSdev@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: TLimoges33 <125313326+TLimoges33@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: SynOSdev <257853113+SynOSdev@users.noreply.github.com>

docs/PLUGIN_IMPLEMENTATION.md

@@ -11,35 +11,35 @@ The LifeRPG plugin system enables users and developers to extend the functionali
 ### Backend Components
 
 1. **Plugin Registry and Management**
-   - `/workspaces/LifeRPG/modern/backend/plugins.py`: Core plugin system backend with database models, API endpoints, and plugin management logic
-   - Database models for storing plugin metadata
-   - API endpoints for plugin CRUD operations
+ - `/workspaces/LifeRPG/modern/backend/plugins.py`: Core plugin system backend with database models, API endpoints, and plugin management logic
+ - Database models for storing plugin metadata
+ - API endpoints for plugin CRUD operations
 
 2. **Plugin API Integration**
-   - Added plugin system initialization to both `app.py` and `demo_app.py`
-   - Defined permission system for controlled API access
+ - Added plugin system initialization to both `app.py` and `demo_app.py`
+ - Defined permission system for controlled API access
 
 ### Frontend Components
 
 1. **Plugin Manager**
-   - `/workspaces/LifeRPG/modern/frontend/src/plugins/PluginManager.tsx`: React hook for managing plugins on the frontend
-   - Logic for loading and executing WASM plugins
-   - Plugin lifecycle management
+ - `/workspaces/LifeRPG/modern/frontend/src/plugins/PluginManager.tsx`: React hook for managing plugins on the frontend
+ - Logic for loading and executing WASM plugins
+ - Plugin lifecycle management
 
 2. **Plugin Admin UI**
-   - `/workspaces/LifeRPG/modern/frontend/src/plugins/PluginAdmin.tsx`: User interface for managing plugins
-   - Installation, enabling/disabling, and uninstallation of plugins
+ - `/workspaces/LifeRPG/modern/frontend/src/plugins/PluginAdmin.tsx`: User interface for managing plugins
+ - Installation, enabling/disabling, and uninstallation of plugins
 
 ### Plugin SDK
 
 1. **AssemblyScript SDK**
-   - `/workspaces/LifeRPG/modern/plugin-sdk/`: SDK for plugin developers
-   - Type definitions and API wrappers for AssemblyScript
-   - Documentation and examples
+ - `/workspaces/LifeRPG/modern/plugin-sdk/`: SDK for plugin developers
+ - Type definitions and API wrappers for AssemblyScript
+ - Documentation and examples
 
 2. **Example Plugins**
-   - `/workspaces/LifeRPG/modern/plugin-examples/pomodoro/`: Example Pomodoro timer plugin
-   - Demonstrates dashboard widget integration
+ - `/workspaces/LifeRPG/modern/plugin-examples/pomodoro/`: Example Pomodoro timer plugin
+ - Demonstrates dashboard widget integration
 
 ## Implementation Details