feat: UI-6 popup lock port uses nonce'd name popup-<uuid> (pairs with LV-5 entry.ts acceptance)

@@ -463,7 +463,10 @@463463     // The SW's onConnect listener locks when this port disconnects.464464     let popupPort: chrome.runtime.Port | null = null;465465     try {466-      popupPort = chrome.runtime.connect({ name: "popup" });466+      // UI-6 / LV-5: nonce the port name per popup open. The SW's onConnect467+      // listener accepts the "popup-" prefix; the random suffix is defence in468+      // depth against a port named exactly "popup" from anything but our popup.469+      popupPort = chrome.runtime.connect({ name: `popup-${crypto.randomUUID()}` });467470     } catch { /* extension context invalidated — ignore */ }468471     onCleanup(() => { try { popupPort?.disconnect(); } catch {} });469472