Fix AMO submission requirements: data collection permissions, innerHTML lint, source README

- Declare data_collection_permissions in browser_specific_settings.gecko
  (Firefox 140+/AMO validation requirement) to reflect wallet address,
  auth signature, and trading-identity data sent to the backend.
- Replace innerHTML assignments in blur-disable.ts and toast.ts with
  DOM construction (createElementNS/createElement) to clear the AMO
  linter's unsafe-innerHTML warning on content.js.
- Add build instructions to README.md for AMO's source code submission
  requirement, triggered by WXT/Vite's bundling and minification.

Co-Authored-By: Claude Sonnet 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01HoMzqFw3d93hG6c9xB4thU

README.md

@@ -1,2 +1,42 @@
-# copilot
-Your blockchain powered Agent to help with your trading emotions
+# Osias — copilot
+
+Your blockchain-powered trading companion. This is the open-source browser extension
+frontend (Apache License 2.0). See [`CLAUDE.md`](CLAUDE.md) for full architecture and
+protocol documentation.
+
+## Build instructions
+
+Built with [WXT](https://wxt.dev) (Vite-based). To reproduce the exact `.output/firefox-mv3`
+bundle submitted to addons.mozilla.org from source:
+
+**Environment**
+- Node.js 22.x (built and tested on 22.11.0)
+- npm 11.x (built and tested on 11.14.1)
+
+**Steps**
+```sh
+npm install       # also runs `wxt prepare` via postinstall
+npm run build:firefox
+```
+
+Output is written to `.output/firefox-mv3/`. To produce the uploaded `.zip` directly:
+
+```sh
+npm run zip:firefox
+```
+
+Output zip is written to `.output/`.
+
+No build secrets, environment variables, or private dependencies are required — everything
+needed to build is in this repository and on the public npm registry, pinned via
+`package-lock.json`.
+
+## Development
+
+- `npm run dev:firefox` — dev build + watch targeting Firefox/Zen, auto-opens a temporary
+  profile with the extension loaded.
+- `npm run compile` — `tsc --noEmit` type-check only.
+
+## License
+
+Apache License 2.0 — see [`LICENSE`](LICENSE).