v7.3.1

• test: set active identity explicitly instead of relying on machine-local state
• docs(wiki): add public-release readiness audit (June 2026)
• ci: harden supply chain and lint docs
• docs: prepare repo surface for public launch
• fix(security): close plaintext-exposure and shell-injection paths across the CLI
• fix(cli): destructure repoLocal so set --file <path> compiles
• fix: allow hush set declared v3 file paths