Cataclysm v0.10.2

Hardens the desktop trust and release boundary: explicit main-window permissions for every custom Tauri command, fail-safe mandatory safety guidance when settings persistence is unavailable, and bounded reference capture with atomic progress and full child-process cleanup. Local strict verification passed the 24-scene 1440p/4K matrix, complete Rust feature matrix, browser suite, audits, and packaged GPU probe. Windows installers remain unsigned until the configured code-signing credentials are available.