v0.120.0

Robustness batch: 13 fixes from the P2 audit of the codebase, plus a progress-race fix reported during validation.

• push reconnects on password change (#133)
• watcher overflow flag never lost (#134)
• avatar cache: delete on account removal + size cap (#135)
• config writes: unique tmp names + directory fsync (#136)
• illegible schema_version rejected (#137)
• color_scheme validated (#138)
• non-UTF8 keyring secret surfaces an error (#139)
• Debug output redacts the account secret (#140)
• server notifications seed the baseline once (#141)
• es.rs/po catalog parity restored and gated in CI (#142)
• tray title without em dash (#143)
• dead parse_metered removed (#144)
• progress label cannot reappear after a run finishes (#145)

656 tests passing.