0.1.11

sec(desktop): harden renderer + packaging

Remediate the findings from the 2026-06-29 security review (docs/):

- I1: esc() now encodes " and ' too, making it safe in attribute contexts
  (values land inside title="…") not just element content.
- I2: add a strict CSP <meta> to renderer/index.html — connect-src 'self'
  contains exfiltration (all egress is via IPC), img-src pinned to evetech.
- I3: wire Electron fuses via electron-builder's electronFuses (runAsNode
  off, NODE_OPTIONS/inspect off, onlyLoadAppFromAsar on; asar integrity
  validation left off pending a smoke-tested Windows build).
- I4: data:wipe-all now shows a main-process confirmation dialog before
  wiping, so a compromised renderer can't silently destroy user data.

Also set sandbox/contextIsolation/nodeIntegration explicitly in
webPreferences so a future Electron default change can't weaken the
renderer. Documented in CLAUDE.md + README "Privacy & security".

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>