chore(release): bump to 1.3.0

v1.2.0 was published as a tarball but its package.json bump was never
committed back to git. This release picks up where that gap left off
and includes two fixes that v1.2.0 (commit a216dd8) was missing:

  - 6abba43: clear ALL pending self-update history entries (not just
    the first), so stuck installs unwind cleanly.
  - 0460129: allow apiSourceDir to be overridden via the
    DASHCADDY_API_SOURCE_DIR env var, so installs that don't follow
    the default /etc/dashcaddy/sites/dashcaddy-api/ layout (e.g. older
    deployments under /opt/dashcaddy/) can point the auto-updater at
    the right path without patching the constructor.

Without these, instances on the older /opt/dashcaddy/ layout get
stuck in a 30-min retry loop where every update attempt fails with
'cp: cannot create directory /etc/dashcaddy/sites/dashcaddy-api/'.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

dashcaddy-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dashcaddy-api",
-  "version": "1.1.5",
+  "version": "1.3.0",
   "description": "DashCaddy API server - Dashboard backend for Docker, Caddy & DNS management",
   "main": "server.js",
   "scripts": {
@@ -22,6 +22,7 @@
     "compression": "^1.8.1",
     "cors": "^2.8.6",
     "dockerode": "^4.0.9",
+    "dropbox": "^10.34.0",
     "express": "^4.22.1",
     "express-rate-limit": "^7.5.1",
     "helmet": "^8.1.0",
@@ -34,7 +35,9 @@
     "proper-lockfile": "^4.1.2",
     "qrcode": "^1.5.3",
     "sharp": "^0.33.5",
+    "ssh2-sftp-client": "^11.0.0",
     "validator": "^13.11.0",
+    "webdav": "^5.7.1",
     "ws": "^8.20.0"
   },
   "devDependencies": {