v0.2.2

• Add export --no-redact for private migration and --allow-unredacted on input.
  Explicitly mark these bundles and preserve native bytes without redaction.

• Add independent --skip-path-checks, --skip-size-checks, --skip-checksums,
  --skip-format-checks, --skip-content-checks, --overwrite and --allow-http
  overrides. --yolo combines all overrides and disables export redaction.
  Normal commands retain the security defaults.

• Confine restores to known agent layouts; derive resume commands locally and
  reject unsafe paths, aliases, undeclared files and incorrect ZIP sizes.

• Write sensitive output privately and atomically. Extraction requires a new
  directory; export and download refuse to overwrite existing files.

• Redact metadata, structured credentials and all supported native text.
  Omit repository/cwd metadata by default; add --include-metadata to include it.
  Reject unsupported binary/encoded native content; --no-native exports only
  the readable conversation. Redaction remains best effort; review before sharing.

• Add --redact-file / FLIGHTLOG_REDACT_FILE for private names and domains.

• Require HTTPS, disable redirects, add transfer deadlines and --url-file.

• Use a fixed Cursor database schema and SQLite 3.53.2; exclude unreachable blobs.

• Gate releases on tests, dependency/secret scans and a private-reference policy;
  inspect archives before upload and publish build attestations.

• Fix private Windows file and directory permissions and Windows session paths.

• Rust 1.88 or newer is required.