v0.6.0

• Replaced the Linux Landlock sandbox with bubblewrap, extending sandbox support to older Linux kernels while keeping workspace access confined.
• Switched Linux release builds to musl targets for both x64 and arm64, and moved the HTTP stack from native TLS/OpenSSL to rustls.
• Fixed terminal cleanup when the main TUI thread panics, restoring raw mode, mouse capture, bracketed paste, and the alternate screen instead of leaving the shell unusable.