grove 0.43.0

What's changed since v0.42.0

Security

• Updater hardening: redirect pinning and SHA-256 verification of downloaded assets; source updates pin the commit SHA.
• Project-name validation in worktree creation; worktree dirs created 0700; atomic writes go 0600-before-rename.
• Tmux env-key validation; GROVE_CONFIG_DIR honored everywhere.
• Telemetry stays off until the stored preference loads; panic reports reduced to file:line; PostHog key moved to a build secret.

Performance

• Focus/dirty-gated 60ms tick (1s when idle), lazy terminal scraping, off-thread worktree cache rebuild, attention-file mtime cache, per-frame sidebar session bucketing, thread-local icon cache.

Internals & tooling

• grove-core split into its own crate with typed errors; monolithic modules split into directories.
• clippy::pedantic enabled workspace-wide with a curated allow-list; CI now runs cargo-nextest (+ doctests) and a hygiene job (typos, cargo-machete); lefthook pre-commit hooks; stricter cargo-deny (wildcard versions banned).
• Dropped dead dependencies (keepawake, grove-core's anyhow); removed the HTML design mocks and stale planning docs.

Rebuilt bundles after a windows packaging fix (cargo-wix needs -p grove since the workspace split).