0.2.2 Add support for portable version

read the running copy's own folder, and drop the freeze leftovers

A machine carrying both the portable and the installed form collected only
%LOCALAPPDATA% and %ProgramData%, so the bundle held the logs of the copy that
never ran while the running one stayed on disk. Every running process now answers
QueryFullProcessImageNameW once, and a folder with `Data` beside it is read from
that tree instead; AppData still covers installed copies, a copy whose image path
cannot be read, and a run with nothing running. Portable trees land under
logs/portable/<program folder>/ so they cannot overwrite the AppData ones, and
icacls.txt gains the same two folders, since a portable copy's permission problem
is not in the uninstall registry either.

The freeze removal left its wording behind: help.location still promised
dump_file\, main.rs still documented a suspend step, and the README still ran the
reader through freezing and resuming ahead of the dump question. No catalog key
was orphaned, only text.

Verified on this box, which runs both forms: the bundle now carries a portable
app.log reaching 18:22 next to the AppData one that stops at 15:05. Still unproven
here are the elevation-only reads (a service image path, Data\Machine\logs, the
ProgramData logs) and the live install-running entry, so the portable permission
path is covered by a fixture run of permissions() against the real icacls.exe.