v2.8.1

Fixes

Degraded fingerprints no longer collide. Without a hardware machine id the device fingerprint was sha256(username + cpuModel) — identical for every unrelated user on a shared container image. Since the server groups monthly usage by fingerprint, strangers ended up sharing one device group and one 600-call free quota, locking each other out. Degraded fingerprints now carry a random per-install salt (persisted to ~/.execbro, process-scoped if that directory is unwritable), and license validation reports fingerprintDegraded so the server never reads such a fingerprint as evidence of a shared device.

PostHog per-tool events respect the telemetry opt-out. They were ungated while telemetry's own tool_invocation mirror was not, so opted-out installs emitted tool events with no app_detected counterpart and showed up in analytics as "users who never connected an app".

Feedback and SDK hints point at the current repo and package names.