Release v3.28.5

Fixed

• cratis ai install and cratis ai update now install scripts with their execute bit, so hook scripts such as .cratis/ai/hooks/scripts/cratis-quality-gate.sh can be run directly. A file is executable when the corpus ships it as executable or it starts with a shebang; execute is granted only to those who can already read it, and update repairs existing installations and removes execute bits from managed files that are not scripts. When an installed script must become executable but another user owns it, or the file system refuses every mode change on it, the update stops before changing any file and says so; scripts the file system otherwise leaves non-executable are listed under warnings. (#251)