MetalNX v2.2.1: Critical Sandbox Guardrails & macOS Trash Recycling

🛡️ Critical Safety Guardrails & Sandboxing (v2.2.1)

This high-priority release adds bulletproof safety guardrails to ensure that user files, personal directories, and system paths can never be accidentally modified or deleted during compilation or cache clearing:

• Dedicated Sandbox Enclosure (MetalNX_Workspace): Whenever an external SSD or custom scratch directory is selected, MetalNX automatically scopes all intermediate RomFS extraction and build files inside a dedicated MetalNX_Workspace subfolder (e.g. ~/Desktop/MetalNX_Workspace). The root selected folder is never purged or deleted.
• Protected System & User Path Blacklist: Hardcoded guardrails reject any attempts to clean or target root directories (/, /Applications, /System, /Library, /Users, /Volumes/<Drive>) or user personal directories (~/Desktop, ~/Documents, ~/Downloads, etc.).
• macOS Trash Recycling: Completely replaced raw deletion (removeItem and shutil.rmtree) with native macOS Trash recycling (NSWorkspace.shared.recycle and AppleScript Finder Trash). Any purged caches or workspaces are moved to the user's macOS Trash Bin so files can easily be restored if needed.
• Confirmation Modals: Added confirmation dialogs in both Port Studio Step 4 and the Storage & Toolchain Manager before any cache clearing or uninstall operation begins.
• Emergency Data Recovery Guide: Included detailed step-by-step recovery guidance in the README and app documentation for any users who previously unlinked files.
• Automated Verification: 54/54 unit tests passing, verifying sandbox isolation and personal directory protection invariants.