Release TeamVault 3.2.6

[TheStreamCode]

Summary

• harden upload containment, ZIP export failure handling, governance validation, and multisite initialization
• keep the file-manager toolbar accessible at common WordPress desktop widths
• release version 3.2.6 with synchronized WordPress.org, localized, security, citation, and maintainer metadata
• reorganize the GitHub README around product value, installation, security, and visual proof
• add Dependabot configuration, a dedicated social preview asset, and stronger maintainer release governance

User impact

No public REST route, option name, database schema, or runtime visual identity changes. The patch improves defense in depth, corrupt-data handling, governance input normalization, multisite scope, and desktop usability. No configuration changes are required.

Verification

• composer validate --strict
• composer audit --locked --no-interaction
• composer ci — 146 tests, 437 assertions, 4 environment skips
• JavaScript syntax checks and Node tests — 22 passed
• Pester deployment tests — 10 passed
• WordPress Plugin Check 2.0.0 on WordPress 7.0.2 / PHP 8.3.33 — no errors
• runtime package — 55 files, no forbidden paths or secret findings
• isolated browser smoke — activation, upload, download, rename, move, delete, governance pages, and 1280px toolbar interaction