feat: start secuirity thingo

package.json

@@ -19,7 +19,8 @@
     "dependency-graph": "depcruise src --include-only \"^src\" --output-type dot | dot -T svg > dependency-graph.svg",
     "release": "gh release create $npm_package_name@$npm_package_version ./dist/*.zip --generate-notes",
     "publish": "bun lib/publish.js --b",
-    "zip": "bedframe zip"
+    "zip": "bedframe zip",
+    "test": "vitest run"
   },
   "targets": {
     "prod": {
@@ -40,6 +41,7 @@
     "@babel/runtime": "^7.26.9",
     "@bedframe/cli": "^0.1.2",
     "@crxjs/vite-plugin": "^2.4.0",
+    "@types/jsdom": "^28.0.1",
     "@types/mime-types": "^3.0.1",
     "@types/react": "^19.0.10",
     "@types/react-dom": "^19.0.4",
@@ -47,6 +49,7 @@
     "dependency-cruiser": "^17.0.1",
     "eslint": "^9.33.0",
     "glob": "^11.0.1",
+    "jsdom": "^29.1.1",
     "mime-types": "^3.0.1",
     "prettier": "^3.5.3",
     "process": "^0.11.10",
@@ -55,7 +58,8 @@
     "sass-loader": "^16.0.5",
     "semver": "^7.7.1",
     "tailwindcss": "3",
-    "url": "^0.11.4"
+    "url": "^0.11.4",
+    "vitest": "^4.1.5"
   },
   "dependencies": {
     "@bedframe/core": "^0.1.0",
@@ -92,6 +96,7 @@
     "flexsearch": "^0.8.147",
     "fuse.js": "^7.1.0",
     "idb": "^8.0.2",
+    "jspdf": "^4.2.1",
     "localforage": "^1.10.0",
     "lodash": "^4.17.21",
     "mathjs": "^14.4.0",