VERIFY.md, attachSignature-Fix, Sync-Hashes, Scope-Bug

- VERIFY.md: Regressions-Checkliste mit 30 Prüfpunkten
- Fix: attachSignature: false beim Signatur-Update (deaktiviert alte Datei-Signatur)
- Fix: Sig-Hashes werden beim Init + Background-Sync geschrieben (kein grau mehr)
- Fix: Scope-Badge Vergleich über normalisierte Scopes (folderToScope)
- Fix: storage.onChanged refreshed auch Signaturen-Indicator

lib/gitea-sync.js

@@ -544,7 +544,8 @@ class SyncManager {
 
                 await browser.identities.update(identity.id, {
                     signature: fullSig,
-                    signatureIsPlainText: false
+                    signatureIsPlainText: false,
+                    attachSignature: false
                 });
                 updated++;
             }
@@ -784,6 +785,19 @@ async function updateSyncHashes() {
     for (const t of templates) {
         data.tpl[t.id] = simpleHashBg(t.content || '');
     }
+
+    // Also update signature hashes from Thunderbird identities
+    try {
+        const accounts = await browser.accounts.list();
+        data.sig = data.sig || {};
+        for (const account of accounts) {
+            const identities = await browser.identities.list(account.id);
+            for (const identity of identities) {
+                data.sig[identity.email.toLowerCase()] = simpleHashBg(identity.signature || '');
+            }
+        }
+    } catch (_) {}
+
     await browser.storage.local.set({ [HASH_STORAGE_KEY_BG]: data });
 }