Housing Decor Guide

FIXED:
- MultiHouse widget no longer throws ADDON_ACTION_BLOCKED on
  Frame:EnableMouse when refreshed from a cross-addon-tainted call
  stack. The card parent picks up protected-frame status from its
  SecureActionButtonTemplate child (tpBtn). EnableMouse and SetAttribute
  calls in the Bind() block run through pcall guards (gated by
  not InCombatLockdown()) so the rare contamination case is absorbed
  silently; routine binds succeed normally. Reported by pxspin
  2026-05-12.
- VendorPin world-map pool: pin release now calls SetToDefaults() (Tier-2
  pattern from Blizzard's Pools.lua) to clear any inherited Secret state
  before the pin is re-acquired. Prevents the "one secret object
  contaminates the whole pool" scenario that bit VPP on the same day.
  See Reference/MIDNIGHT_SECRET_VALUES.md.
- VendorResolver NPC-name probes (4 sites): replaced pcall taint guards
  around UnitGUID+strsplit and C_TooltipInfo.GetHyperlink+leftText with
  explicit issecretvalue() / canaccessvalue() value-level checks. More
  declarative about the secret-handling invariant. Probes 1 and 2 (target
  / npc unit lookup) now also pre-check C_Secrets.ShouldUnitIdentityBeSecret
  -- added in 12.0.1.66838 -- so we skip the whole probe when Blizzard
  already knows the result will be secret.
- MultiHouse teleport button: SetAttribute block now also pre-checks
  tpBtn:HasSecretAspect("Attributes") before writing. If the button has
  already been marked with the Attributes Secret Aspect by a prior
  tainted SetAttribute (cross-addon contamination), further writes would
  compound the issue; we skip cleanly and the next Refresh re-attempts
  after the aspect clears. Defense in depth with the existing pcall.
- "Reset Configuration" now actually resets font, scale, theme, and the
  other appearance/behaviour preferences. The v2.41 SavedVariables
  flatten moved these keys from HDG_DB.config.* to HDG_DB.* (top level),
  but the reset handler was still only nil'ing the old nested block —
  so users stuck with a bad font (e.g. CJK client with FRIZQT__ chosen,
  showing glyph-fallback boxes for item names) couldn't escape by
  resetting. Reset now wipes every top-level config key as well.