v0.13.1: Safely confirm before rollout restart

Pressing r on a Deployment/StatefulSet/DaemonSet now asks for confirmation before triggering a rollout restart, matching the existing guardrail flow used for delete and drain. restart is also exposed as a gated guardrail action, so it can be denied, escalated to type-to-confirm, or capped via [[guardrails]].

What's Changed

• feat: confirm before rollout restart by @nklmilojevic in #88

Full Changelog: v0.13.0...v0.13.1

License correction: the standard archive downloads contain the original binaries with license notices and required source packages. Verify them with SHA256SUMS. LICENSE-CORRECTION.json records the original archive hashes, corrected archive hashes, and unchanged binary hashes. The corrected archive hashes apply to the standard download names.

Package manager compatibility: the standard archive names and SHA256SUMS are preserved for Aqua, mise, and other package managers. The temporary -licenses downloads were removed after verification. The program binaries are unchanged. Lockfiles with archive hashes from before the license correction need updated checksums.