v2.2.0

Added

• pandod copy: back up, restore, or move a repository between backends (SQLite,
  Postgres, CockroachDB; disk, S3, GCS, Azure). Consistent while the source serves,
  incremental when repeated, keeps compacted objects compact and verifies whole objects.
  Storage ports gain paged listing, covered by the adapter contract tests.
• --audit-log FILE: an audit trail as JSON lines. One record per authenticated request
  (principal, client address, method, status, duration), per rejected request (address and
  reason, never the token), and per land, branch move, content read and history query,
  with paths and results. Off by default.
• Coverage-guided fuzzing (cargo-fuzz) of every decoder of untrusted bytes: objects,
  trees, changesets, chunk manifests, deltas and paths, with a seed corpus of valid
  inputs. Ten minutes per target nightly, one minute on pull requests.