v1.2.0

Highlights

• dotf CLI: a stowed veneer over the repo scripts (dotf apply|doctor|update|test).
• Curl-able bootstrap.sh for fresh Ubuntu servers, with hardened, upstream-verified clones (download-then-run one-liner).
• doctor.sh dotf drift check to catch stow/symlink drift.

Fixes

• install-tools: self-clear the Neovim cleanup trap so it no longer aborts on main return.
• bootstrap: verify every clone against upstream through a hardened check; bind the clone URL in the guard and stop it failing open; verify the target repo exactly before use.
• apply: validate repos, parse args strictly, treat retryable clone failures as success, and harden error handling; enable errtrace so the ERR trap fires.
• dotf: fail closed when git status errors during update.
• doctor: resolve both symlink sides to avoid false dotf drift.
• gitignore: restrict the .local unignore to the dotf package so XDG .local dirs stay committable.

Docs

• Document the bootstrap one-liner, dotf, safe bootstrap invocation, and dotf update semantics.
• Add instructions for removing a user and deleting its home directory.

Full changelog: v1.1.1...v1.2.0