fix: scanner ignoriert metadaten-links (gmpg.org rel=profile); version 1.2.0

- Nur ladende <link rel=...> (stylesheet/preload/icon/...) werden gezaehlt;
  rel=profile/canonical/pingback etc. (z.B. gmpg.org) sind keine Requests mehr.
- Plugin-Version + Header auf 1.2.0 (passend zu readme), Changelog-Eintrag.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

license-backend/src/scan.js

@@ -13,6 +13,16 @@ function normHost(h) {
   return String(h || '').toLowerCase().replace(/:.*$/, '').replace(/^www\./, '');
 }
 
+// Only these <link rel="…"> values actually fetch/connect to a resource.
+// Everything else (profile, canonical, alternate, pingback, EditURI, wlwmanifest,
+// shortlink, https://api.w.org/, …) is pure metadata and triggers no request —
+// e.g. gmpg.org via rel="profile" must NOT be reported.
+const LINK_LOADING_RELS = new Set([
+  'stylesheet', 'preload', 'modulepreload', 'preconnect', 'dns-prefetch',
+  'prefetch', 'prerender', 'icon', 'shortcut icon', 'apple-touch-icon',
+  'apple-touch-icon-precomposed', 'mask-icon', 'manifest', 'fetch',
+]);
+
 /** Extract absolute resource URLs (with a type tag) from one HTML document. */
 export function extractResources(html, baseUrl) {
   const out = [];
@@ -23,9 +33,16 @@ export function extractResources(html, baseUrl) {
     const body = m[2];
 
     let raw = '';
-    if (tag === 'object') raw = attr(body, 'data');
-    else if (tag === 'link') raw = attr(body, 'href');
-    else raw = attr(body, 'src');
+    if (tag === 'object') {
+      raw = attr(body, 'data');
+    } else if (tag === 'link') {
+      // Skip metadata links that never load anything (rel="profile" etc.).
+      const rel = attr(body, 'rel').toLowerCase().trim();
+      if (!LINK_LOADING_RELS.has(rel)) continue;
+      raw = attr(body, 'href');
+    } else {
+      raw = attr(body, 'src');
+    }
 
     if (!raw) continue;
     if (/^(data:|blob:|javascript:|mailto:|tel:|#|about:)/i.test(raw)) continue;