v0.6.5 - Audit Hardening, Fail-Closed Enforcement & Verification Hardening

What's Changed in v0.6.5

Fail-Closed Server Enforcement & Git Plumbing

• Hardened server-side pre-receive enforcement to fail closed on missing master keys or corrupted payloads, querying Git trees directly via low-level Git plumbing.

Transactional Rekey Recovery Verification

• Propagated all restoration errors during rekey recovery; backups and WAL journals are preserved until post-rollback repository consistency is cryptographically verified.

Escaped .gitattributes Whitespace & Tokenization

• Hardened .gitattributes parsing with robust tokenization respecting escaped whitespace, quotes, comments, and directory boundaries (/).

Release Workflow & Platform Test Verification

• Restored comprehensive multi-target integration test suites on macOS and Windows CI runners.
• Hardened Windows release artifact checksum and provenance verification in automated release workflows.
• Corrected verification matrix test paths and clarified security boundaries for hosted CI environments.

Full Changelog: v0.6.0...v0.6.5