v0.2.5

Changelog

• 07e053f assets: draft-guard the live reload; one g-chord owner via HDKeys
• 0f68850 docs/ai: mark v0.2.4 release done — verified via brew upgrade + hdeck contract
• a9d3535 jsonfile: flock-serialize Patch so cross-process writers can't revert each other
• ab19589 jsonfile: one shared atomic-write/patch helper kills the RMW bug cluster
• b645880 manifest: a mistyped field in a known block degrades, not kills the report
• 24e7e6c mcp: list_reports scans the same roots as the dashboard
• cabb96f render: allowlist link schemes — javascript:/data: never become hrefs
• a251b5d respond: serialize + atomically write the user's answers
• c109db9 server: refuse report deletes that would RemoveAll a shared directory