v0.3.0

• Expired items no longer linger invisibly until someone opens the
  trash area: when only expired items remain, the menu badge no
  longer disappears but turns red, showing their number as a
  "cleanup required" call to action. Opening the area removes them
  (as before) and now reports what was just cleaned up — no more
  "invisible gigabyte" on sites where nobody visits the trash; the
  CLI command remains the guaranteed path for unvisited sites
• Postpone deletion: every item can be kept for another retention
  cycle via its options menu or the details dialog — the natural
  action to the warn color's "last chance" signal. Implemented as a
  keepUntil meta field, so the "Deleted" column keeps telling the
  truth; gated by the restore permission and hidden when retention
  is disabled
• The empty-trash header button is additionally gated on the root
  warning (defensive only — the warning state already implies an
  empty item list)
• rootIssue() also flags a root that exists as a file or dangling
  symlink, or whose path is blocked by one in an intermediate
  segment — previously these misconfigurations slipped through as a
  silent empty area