4.13.1: calendar, folder, MCP setup, and bundle fixes

[callumalpass]

Summary

4.13.1 followups requested by the maintainer; deliberately excludes #2218.

• Integrates Fix duplicate Google Calendar events when completing recurring instances #2203 with contributor history retained, conflicts resolved, release acknowledgement, and a guard that distinguishes actual next-occurrence advancement from a manual move accompanied by new history. Tests use the real RRULE engine and a fixed clock.
• Integrates Add today and future classes #2224 with contributor history retained and the pre-existing [FR]: Add a --today class to the UI #2223 test work. Completed past dates do not acquire the future class when overdue styling is hidden.
• Lands the existing [Bug]: If {{currentNotePath}} contains characters that look like date tokens, TaskNote makes a new folder. #2335 literal current-note folder patch, preserving normal creation paths that do not need an active note.
• Addresses [Bug]: ICS calendar events are silently dropped when a property parameter is quoted and contains a delimiter #2313: match the calendar owner's attendee response when X-WR-CALNAME is an email address; do not hide meetings because another guest declined. Unknown-owner feeds stay visible. Recurrence overrides may inherit or override the owner's response. Documented the policy and refresh requirement.
• Addresses [Bug]: MCP server not working any more #2329 with token generation/restart/client configuration instructions in HTTP API docs and all nine settings locales. Authentication behavior is unchanged.
• Includes the already-committed [Bug]: 4.13.0 main.js is 5.02 MB — over Obsidian Sync's 5 MB per-file limit (Standard plan), so the plugin no longer syncs between devices #2336 UTF-8/bundle-budget work and date-fns/AJV deduplication from local main.

Please merge with a merge commit to preserve the ancestry of #2203 and #2224. Issues remain open pending release; this does not publish 4.13.1.

Validation

• Full Jest: 714 suites passed; 4,272 tests passed, 1,011 skipped, 4 todo.
• Typecheck, full lint, i18n verification (all locales current), docs source/build checks passed.
• Seven Node bundle/dependency checks passed.
• Production build: 4,491,936 bytes, below the strict 5,000,000-byte limit.
• Built and reloaded in native Obsidian test vault. Parse-only ICS smoke: owner accepted visible, owner declined hidden, unknown owner visible. Actual disposable task creation preserved AMM-01 and cleaned up afterward. Updated token guidance verified in the loaded plugin.
• No live Google Calendar mutations, Claude Desktop authentication session, or mobile acceptance test claimed. Native error buffer retains the previously recorded Electron destroyed-object error.