Clipboard Sync 0.2.1

Security

• Key rotation now issues envelopes only to the engine's rollback-aware trusted set. Before, a device whose older admin-signed row had been restored after a block (a rollback the engine already ignored for clips) could still receive the new passphrase. Found by running the attacker suite against a live Supabase project.

Changed

• Live contract tests allow real websockets time to subscribe; new live_attacker_test.dart runs the signed-group threat model against a real database (dart test -t live).

Unsigned builds — see docs/release.md for Gatekeeper / SmartScreen steps.
Verify downloads with SHA256SUMS.txt.

What's Changed

• fix(security): rotate keys only to the rollback-aware trusted set (0.2.1) by @dhipin in https://github.com/appfide/clipboard-sync/pull/4

Full Changelog: https://github.com/appfide/clipboard-sync/compare/v0.2.0...v0.2.1