v0.7.2

Release: dispatchable tap job and a clear error when the app token fails

The v0.7.1 tap push failed with "Not Found" from the installation lookup
because the tap GitHub App had been created but never installed on
planesailingio/homebrew-tools. The app is now installed; this makes the
workflow easier to recover and harder to misdiagnose:

- workflow_dispatch with a `version` input runs only the tap job for a
  release that is already published, so a failed tap can be redone without
  re-tagging. build and release are skipped on dispatch.
- A step after the token mint prints, on failure, what the two common
  errors mean (app not installed vs. app id/key mismatch).
- docs/releasing.md: verify the install took, share the org values with
  every tool repo, and list the failure signatures and re-run paths.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

v0.7.1

Push the Homebrew tap with a GitHub App token

The tap job authenticated with a HOMEBREW_TOOLS_TOKEN PAT secret that was
never created, so the v0.7.0 release published but the tap push failed.
Mint a short-lived installation token for the org's tap GitHub App with
actions/create-github-app-token instead, from the TAP_APP_ID variable and
TAP_APP_PRIVATE_KEY secret, and document the app setup in docs/releasing.md.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

v0.7.0

Fix Linux and Windows test runs

- kopia.rs: `--no-use-keychain` exists only in the macOS build of Kopia
  0.23.1; Linux (and Windows) reject it and every e2e test failed at
  `init`. Pass it on macOS only. Also fall back to `kopia.exe` on
  Windows when PATHEXT is absent from the environment.
- contain/unix.rs: `mode_t` casts are needed on macOS and flagged as
  redundant on Linux; allow the lint on that one binding.
- contain/mod.rs test: Linux RESOLVE_IN_ROOT re-roots a `..` chain back
  inside the root rather than refusing it; accept that, the on-disk
  checks still prove nothing escaped.
- place.rs test: pick a source OS that differs from the host so the
  cross-OS symlink skip fires on Linux too.
- cli_e2e.rs: on Windows pass PATHEXT, SYSTEMROOT and the temp dirs to
  the child and set USERPROFILE to the fixture home.
- docs/kopia-compat.md: note the keychain flag is macOS only.

Verified locally on macOS and in a Linux container (fmt, clippy, all
tests with Kopia 0.23.1) plus clippy for the x86_64-pc-windows-msvc
target.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>