WinCleaner v0.5.1

Fixed

• Two Winapp2 entries deleted application content, not cache. [Vortex *]
  swept %LocalAppData%\Vortex-Updater, where Vortex stages the executables of
  its own pending update, and [Discord *] deleted the Squirrel .nupkg
  packages the installed tree is unpacked from and the next delta is computed
  against. The converter now carries an explicit app-content deny-list
  (winapp2.rs::APP_CONTENT_DENY): a denied directory prefix sinks the whole
  FileKey, a denied file spec removes that spec. Refused keys are counted by
  app_content_keys and an entry left with no FileKey by
  dropped_app_content; on the embedded file this refuses 3 keys and drops no
  entry — both applications keep their real cache keys. Closes #2.
• Sandbox folders are no longer left behind in %TEMP%. Leaving the
  sandbox was the only thing that removed its directory, so a crash, a kill or
  a window closed with a sandbox still open left
  %TEMP%\wincleaner-sandbox-… and its few hundred files there for good.
  WinCleaner now sweeps those leftovers at every start — only ever a directory
  whose owning process is gone, never one a running WinCleaner is using — and
  Settings → Sandbox shows a line naming how many are left and how much they
  take, with a Remove button, so no restart is needed. Closing the window with
  a sandbox active also attempts the removal on the way out, within a short
  budget so the window never hangs on it. The sweep unlinks junctions before
  removing a tree, exactly as leaving the sandbox does, and never counts nor
  follows what is on the other side. Closes #3.

Installers are unsigned until SignPath signing is configured in the repository secrets — see docs/code-signing.md.
Full changelog: https://github.com/CaseReed/wincleaner/blob/main/CHANGELOG.md