v1.0.284

🐛 Fix: Windows state files and single-instance boot

v1.0.283 made state files replace atomically, but on Windows a rename over a file that something is reading fails, and Cockpit fell straight back to an in-place write — so readers could still see a half-written file. The rename now retries briefly, and never collides with reads inside Cockpit itself. The same retry protects taking over a stale server.lock, which on Windows could crash the boot.

🐛 Fix: Host header with a default port

Requests with Host: localhost:443 and Origin: https://localhost:443 (as some reverse proxies send) were rejected as cross-origin. The default port is now ignored on both sides.