v0.6.1

Bug Fixes

• Add 12 missing config keys for Twitter OAuth 2.0, Reddit OAuth, Google Calendar, VirusTotal, and GitLab URL — these integrations can now persist credentials properly
• Fix Twitter integration status check using wrong config key (x_api_key → x_client_id)
• Add error check on SMTP w.Close() in email reply path — replies no longer silently fail

Security Hardening

• Add 30s timeout to 3 HTTP clients missing timeouts (StackExchange, Trello, paste GET)
• Bound Redis RESP array parser recursion depth to 64 to prevent stack overflow from malicious servers

Cleanup

• Remove 5 dead OAuth 1.0a config fields (twitter_api_key, twitter_api_secret, twitter_access_token, twitter_access_secret, reddit_client_secret)
• Remove unused Verbose(), parseMdlsOutput(), parseSize() functions and their tests

11 files changed, 113 insertions, 151 deletions