v0.2.42

Fixed

• Native Windows repository, linked-worktree and submodule paths now agree with
  filesystem identity, including aliases and moved child checkout placeholders.
  Worktree moves run outside the directory being renamed, and nesting guards
  compare canonical paths.
• Windows config paths round-trip through ~/, and Claude project keys encode
  drive letters and native separators consistently. Git hook detection follows
  Windows executable semantics.
• Machine identity directories are created with their private policy atomically;
  disk-size cache and project trust temporary files receive owner/DACL protection
  before content is written, bound to the retained creation handle.
• Operation lease locks verify the held file's identity and private policy;
  Windows seals safe inherited private DACLs without repairing foreign or
  broadly accessible files. Explicit template Git URLs and SCP references no
  longer fail Windows local-file inspection before cloning.
• The full Windows suite is now a required CI gate. Native provider fixtures,
  isolated HOME/USERPROFILE and explicit Git line-ending defaults keep tests
  from accidentally using installed tools or runner settings. Unsupported POSIX
  mutation transports retain explicit rejection tests, and lease tests report
  early operation failure instead of waiting indefinitely.
  Large CLI/taskflow suites run in eight native shards with complete package,
  test, example and fuzz-seed discovery; an audit fails on missing results,
  failures and timeouts, with per-invocation logs retained.