feat: ADD syntax highlighting - lazyload only when selected - avoided autodetec bc of bloat #6

README.md

@@ -25,6 +25,7 @@ The goal is to keep it simple! For feature-rich solutions please check out [hedg
 - per-pad password protection (PBKDF2-SHA256), with a built-in password generator in the UI
 - `?pw=…` on a pad URL locks it with that password if it is not protected yet, and unlocks it if it is —
   so `https://aukpad.com/{pad_id}/?pw=s3cret` is a one-step create-and-lock link
+- optional syntax highlighting (24 languages) from a per-pad dropdown, shared with everyone on the pad
 - line numbers; Tab inserts 4 spaces
 - dark / light mode (auto-detects system preference, manual toggle)
 - copy-to-clipboard and "new pad" buttons, live peer count in the header
@@ -44,6 +45,8 @@ The goal is to keep it simple! For feature-rich solutions please check out [hedg
 - configurable text-size, connection, room, and retention limits
 - per-IP rate limiting (pad creation + failed password attempts), reverse-proxy aware
 - distroless, non-root, read-only-rootfs container image
+- highlight.js is vendored in `vendor/` and loaded lazily — no CDN, no network calls from the browser;
+  a plain pad fetches nothing, a highlighted one fetches only the engine plus its one language
 
 **Ideas:**
 [Check out the open feature requests](https://git.uphillsecurity.com/cf7/aukpad/issues?q=&type=all&sort=&state=open&labels=12&milestone=0&project=0&assignee=0&poster=0&archived=false)