recallnest v2.5.4 — package boundary hardening

Security and packaging

• Replaced permissive npm packaging with an explicit runtime-file allowlist.
• Added tracked-file and final-tarball checks for environment files, runtime config, logs, sessions, databases, key material, and development worktrees.
• Added the same checks to CI and prepublishOnly.
• Removed provider-shaped tokens from tracked visualization assets.
• Stopped doctor from printing API-key prefixes.
• Restored required UI and documentation assets to the package allowlist.

Verification on the release commit: CI passes; tracked credential scan passes; the 309-file tarball contains no forbidden paths.

Distribution note: this GitHub release is published, but npm 2.5.4 is not yet available because registry authentication is not configured on the release machine. Use the GitHub source until the registry publication and old-version deprecation are completed.