feat: adopt typed yt-dlp broker and handle adaptive audio

.github/workflows/plugin-ci.yml

@@ -0,0 +1,20 @@
+name: Plugin CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+    tags: ["v*"]
+
+jobs:
+  plugin-ci:
+    if: ${{ !startsWith(github.ref, 'refs/tags/') }}
+    permissions:
+      contents: read
+    uses: mpiton/vortex/.github/workflows/plugin-ci.yml@f63e53f866bbdf5e5e3e8f62a37f78e13cec5298
+
+  plugin-release:
+    if: ${{ startsWith(github.ref, 'refs/tags/') && github.actor == github.repository_owner }}
+    permissions:
+      contents: write
+    uses: mpiton/vortex/.github/workflows/plugin-release.yml@d85baa93ac7905c5813095b2406f2a3642458356

CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+All notable changes to vortex-mod-vimeo will be documented here.
+Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [1.4.0] - 2026-07-15
+
+### Added
+
+- Added a real Extism smoke test for the release WASM artifact, covering every
+  crawler export and the typed yt-dlp broker boundary.
+
+### Security
+
+- Replaced the generic `run_subprocess` import with Vortex 0.2's typed
+  `run_ytdlp` broker. The plugin now sends only a download action, URL, media
+  preferences, and output directory; the trusted host owns the binary,
+  command-line arguments, timeout, environment, and working directory.
+
+## [1.3.1] - 2026-04-22
+
+- Previous releases were not documented in this file.