Breeze Core v2.6.1

Patch release: fixes a silent SELinux failure in the native packages on RHEL, Fedora, AlmaLinux, Rocky, and SELinux-enforcing SUSE.

The bug

The packaged binary lives in /usr/lib/breeze-core/, which SELinux labels lib_t — not a domain-transition entrypoint. The service therefore ran as init_t instead of unconfined_service_t, and init_t's writes to /etc/breeze-core are denied and dontaudit'd: the server starts and reads its config fine, but approving a device pairing (or saving programs) fails with a 500 and nothing in the audit log. Found live by breeze-core diag during the maintainer host's own migration to the rpm.

The fix

Package post-install (and the tarball install.sh) now label the executable bin_t (semanage fcontext + restorecon, chcon fallback) — guarded by selinuxenabled, a no-op everywhere else. Already-installed 2.6.0 on SELinux hosts: one-time manual fix in TROUBLESHOOTING.md.

Debian/Ubuntu/Arch/Alpine/OpenWrt users are unaffected (no behavior change). Repo users: this arrives as a normal upgrade. No API changes.

Linux package assets are attached by CI — give it a few minutes if the list below is short.