v0.13.0

Added Selected Profile and Default User scope options with explicit profile-root validation, separate Profile and DefaultUser backup/restore scopes, admin-gated profile/default mutations through the guarded file-operation helper, and profile/default-user regression coverage.