Renamed plugin to “ALMC Electronic Invoicing for VeriFactu” and slug to “almc-electronic-invoicing-verifactu” to clarify the AEAT specification reference and remove any implied affiliation.
Replaced inline <style> block in the onboarding panel with wp_enqueue_style() (assets/css/almc-onboarding.css).
Replaced inline <script> in the setup-notice dismiss handler with wp_enqueue_script() (assets/js/almc-setup-notice.js).
Hardened webhook input handling: decoded JSON payload now goes through an explicit whitelist + per-field sanitization before being passed to any do_action callback.
Internationalisation: updated text-domain to the new slug across all PHP files.
