RedSeek Rescue v1.6.0

RedSeek Rescue v1.6.0 — Secure Boot, QEMU Smoke Test, Snapshot Enforcement

🔒 Secure Boot Support (NEW)

• shim-signed (Microsoft-trusted bootloader) + MOK key enrollment
• GRUB signed with sbsign using auto-generated MOK key
• EFI/BOOT/BOOTx64.EFI → shim, EFI/BOOT/grubx64.efi → signed GRUB
• EFI/BOOT/mok/MOK.crt included in efiboot.img for enrollment
• Zero-config: auto-detects if shim + sbsigntool are installed
• Fallback: non-SecureBoot mode if packages missing

🧪 QEMU Smoke Tests (NEW)

• BIOS boot test: qemu-system-x86_64, 30s timeout, serial capture
• UEFI boot test: OVMF bios, 30s timeout
• Runs on every automated build (tag v*)

🛡️ Mandatory Snapshot Enforcement (NEW)

• require_snapshot() in utils.sh — blocks destructive ops without backup
• reset-password.sh, registry-tools.sh, repair-boot.sh protected
• snapshot-system.sh creates sentinel file after backup

✅ Previous features include:

• 24 defensive scripts with Safe by Design architecture
• AI + Offline hybrid (Hermes + DeepSeek)
• Fallback offline playbook with JSON report
• BitLocker, VSS, registry, boot repair, password recovery
• CI/CD with ShellCheck, bats tests, auto-build ISO
• Enterprise .github templates, banners, test framework