Block prototype pollution attacks

Added security guards to the store's setStore function to prevent attackers from polluting JavaScript's prototype chain through store paths like `__proto__`, `constructor`, or `prototype`. The fix rejects dangerous property assignments and logs warnings in development mode.