v1.10.2

Changelog

• 0823aa1 Merge branch 'fix/arch-gate-blind-spots' (los reportes de crash vuelven a describir el crash: instalación atómica del binario para que nadie ejecute un PE truncado, identidad del agente tomada de quien detectó la muerte en vez de releer un fichero que se está borrando, un colector caído deja de culpar al usuario, y las líneas de log quedan en ASCII con guard mecánico)
• 2165c39 Merge branch 'fix/vpn-503-actionable'
• fb5d4d7 Merge branch 'main' into fix/vpn-503-actionable
• 1a1ba2e chore(release): 1.10.2
• 33a1ab5 ci: let CI be dispatched, because a missed push cannot be replayed
• 2f4986b ci: run the architectural gate, which CI never did
• 5c35213 docs(logs): say that log_max_size_mb bounds nothing under systemd
• 0bf8bc0 fix(arch): run the gate once per GOOS, so platform code stops slipping through
• 61127b6 fix(config): treat an explicit empty api_url as unset
• 8cb8c3c fix(desktop): stop crash reports describing an agent that is not the one that died
• 600fa95 fix(doctor): keep the closing tip inside 60 columns
• 4cf1eec fix(logs): keep every log line ASCII, and guard the rule mechanically
• b1e3bd0 fix(upgrade): install the binary atomically, so nothing ever execs a prefix
• b3378bb fix(vpn): say WHICH server disabled the VPN, and stop blaming the account
• a6fdbe2 test(desktop): drop a no-op statement and name the clean-stop guard for what it asserts
• 45d3de3 test(logs): make the ring's bound provable, not a coincidence of volume
• 47c47d0 test(logs): pin the journal-vs-file routing instead of testing it by hand
• 3ee1747 test(postprocess): assert containment against the destination the writer resolved
• 552d6fb test(upgrade): stop asserting a POSIX mode bit that Windows does not have