Sanctum v0.1.0

See CHANGELOG
for what's new in this release.

Verify downloads — SHA-256 checksums are attached to this release.
macOS: open the .dmg normally; Gatekeeper will clear the notarized build.
Windows: if SmartScreen blocks the installer, click "More info → Run anyway"
until the signing cert has accrued enough reputation (or use an EV cert).