feat: rebrand to MMD PDF, single corporate theme, and remove original text under an edit

- Services/PdfRedactText.cs: strip text whose origin falls inside a CoverAnnotation
  from the page content stream at save time, hooked into PdfBurn.DrawAnnotationsIntoDoc.
  Fixes edited values staying recoverable by text extraction.
- Themes/MMD.xaml replaces all thirteen themes; picker and accent strip removed; no dark mode.
- Rename KillerPDF -> MMD PDF across code, resources, packaging and locale strings; new icon.
- Remove the upstream author credit and the in-app install button.

Shell/WindowChrome.cs

@@ -16,10 +16,10 @@ using Microsoft.Win32;
 using PdfSharpCore.Drawing;
 using PdfSharpCore.Pdf;
 using PdfSharpCore.Pdf.IO;
-using KillerPDF.Services;
+using MmdPdf.Services;
 using PdfPigDoc = UglyToad.PdfPig.PdfDocument;
 
-namespace KillerPDF
+namespace MmdPdf
 {
     public partial class MainWindow
     {
@@ -289,7 +289,7 @@ namespace KillerPDF
             bool updating = machineInstallExists || userInstallExists;
             // Two checkboxes, matching Killendar and KillerShell: the desktop shortcut (on by
             // default, as it always was) and the all-users install. If an all-users copy already
-            // exists, keep that scope selected: KillerPDF deliberately supports one installed
+            // exists, keep that scope selected: MmdPdf deliberately supports one installed
             // copy, not competing Program Files and per-user installations.
             var (confirmed, wantDesktop, allUsers) = KillerDialog.ShowTwoCheckPrompt(this,
                 Loc(machineInstallExists ? "Str_Dlg_UpdateMachineMsg" :