v0.3.1 — redact, scan cache, instant first paint

End-user polish pass on top of 0.3.0 — fixes things you notice within the first minute of using the app.

Added

• Working bulk + per-finding redact. redactSecretsInFile parser, redactSecrets adapter method (Claude), and POST /api/sessions/:id/redact route. Every redact writes a verified timestamped backup to ~/.conclear/backups/ before rewriting the session file. UI: "Redact all" on both the global Security page and the per-session Security tab; scissors button on every finding row to redact just that line.
• Shared scan cache. Module-level singleton store backs the sidebar Security count, the global Security page, the per-session Security tab, and the SessionDetail header badge. No more rescanning every time you navigate. Rehydrates from localStorage on cold start so something paints instantly.
• Sessions list cached on first paint. useSessions hydrates from localStorage (conclear.sessions.v1) before the network round-trip; background refresh updates when ready. Errors no longer wipe the cached list.
• Real image thumbnails. Images tab and lightbox render from /api/sessions/:id/images/:imageId instead of colored gradient placeholders. Stripped images still fall back to a gradient.

Changed

• Timeline paginates at 200 rows. Huge sessions no longer trigger Firefox's "page slowing down" warning. "Show N more" button to expand. Non-expandable rows now render with cursor: default so the click affordance is honest.
• Claude project directories decoded for display. -Volumes-4tbCache--Projects-ConClear → ConClear in session group headers, overview lists, and detail view. The raw form is still used as the internal key.
• Titlebar MCP chip no longer claims "running." ConClear's MCP server is spawned on demand by each client; the chip now reflects that and links to Connect.
• Sidebar Security count flips to alert styling when findings > 0.

Fixed

• Per-session Security tab re-scanned every visit. It now reads from the shared cache and only fetches when uncached.