fix: Mozilla-Addon-Validierung korrigiert

- `data_collection_permissions` in `browser_specific_settings` ergänzt (`required: ["none"]`)
- `applications` → `browser_specific_settings` migriert (aktueller Manifest-Schlüssel)
- Unsichere `innerHTML`-Zuweisung in content-script.js durch `DOMParser` ersetzt

src/content-script.js

@@ -59,8 +59,7 @@ function getSelectionFragment() {
     return { text: "", element: null };
   }
 
-  const container = document.createElement("div");
-  container.innerHTML = lastSelectionHtml;
+  const container = new DOMParser().parseFromString(lastSelectionHtml, "text/html").body;
 
   return {
     text: lastSelectionText,