Release 1.1.3 — ship .htm support

[yolo-sam]

What

Cut 1.1.3 so the already-merged .htm support (commit 70b8afa) actually reaches installed plugins. The vault-installed build was 1.1.2, which only registers .html — hence .htm embeds failed with "could not be found".

Changes

• Bump manifest.json, package.json, versions.json → 1.1.3 (no code change; .htm logic already on main)
• test/test.sh: npm run build → bun run build (npm is blocked on dev machine; test couldn't build)

Verification (live Obsidian)

• .htm routes to html-docs view ✓ and .htm embed registered ✓ (live smoke test)
• All 17 iframe capability/isolation tests pass
• Installed 1.1.3 build into vault; live app.viewRegistry.getTypeByExtension('htm') → html-docs, embedRegistry.isExtensionRegistered('htm') → true

Notes

• 18 smoke-test checks return empty strings due to an obsidian-cli eval response-timeout that truncates blocks awaiting long setTimeouts — a pre-existing harness limitation (proven: a bare 1200ms-awaited eval returns empty), not a regression. Not fixed here to keep the release tight; can address separately.
• Release ships when tag 1.1.3 is pushed (per release.yml).
• bun.lock left untracked (repo is npm-based; CI uses npm ci).

[smcllns]

LGTM