Firefox Extension 1.7.0

Features

• recover a vault whose entries won't decrypt, from a verified snapshot
• write KeePass .kdbx files under a user-chosen password
• read Apple Passwords and Google Password Manager CSVs

Bug Fixes

• stop gym littering the repo root with build artifacts
• keep the export path out of the ffi build
• require an explicitly captured VEK to send an enrollment bundle
• refuse a blind blob write when several vaults are registered
• verify the loaded key before overwriting a vault's entries
• record the active vault before the VEK swap, clear it on delete
• bind a mobile roster session to one vault for its lifetime
• stop Xcode re-stamping the build number at export
• stop the AutoFill unlock flashing "Keychain status -25308"
• re-translate fastlane metadata when the English source changes

Refactors

• group the three suites under e2e/ and document them in one place
• group Import & backup by whose format it is
• move the iOS lanes to the repo-root fastlane/

Documentation

• rewrite the 1.4.2 store copy and re-translate
• record the mobile hardening for issue #27
• note the AutoFill unlock fix in the release notes
• trim the release notes to what's actually new
• note the one-time-code AutoFill in the release notes

Other

• ci: run the extension e2e suite, opt-in per PR via an e2e label
• test(android): pair the extension with the shipped app on a real device
• test(sync): assert the joiner can read the inviter's data, not just pair
• test(sync): pair the extension and the mobile app over a real relay
• test(android): drive the shipped app on-device over CDP via adb
• test(mobile): integration-test the issue #27 corruption with real crypto
• test(e2e): cover KDBX export through the real extension
• test(import): flesh out the CSV import fixtures

Full Changelog: 1.6.1-firefox...1.7.0-firefox