v0.23.2

Fixes crashes on malformed install manifests; hardens the toolchain behind the scenes.

Context

The user-facing fix closes every escape point where a malformed server
manifest (missing checksum, wrong-shaped platforms or entries, null values)
could crash the installer instead of reporting a clean error. Internally,
this release completes a large hardening effort: the entire test suite was
converted to autospec'd mocks (0 bare patch sites, enforced by a new
AST-based preflight gate), mypy strict now covers tests as well as the
package, ruff lint and formatting were adopted repo-wide, and all release
gates are defined as canonical wrapper scripts so gate scope can never
silently drift.

Breaking

• Breaking: strictcli v0.29.0 migration. The _bind wrapper now accepts ctx as first parameter, threading it through to strictcli's new handler contract.

Fixes

• Fixed crash on malformed install manifests. Installing a Claude Code version whose server manifest is missing or malforms expected fields (checksum, platforms, entry shapes) no longer crashes with a traceback; the CLI reports a clean error and the TUI shows the install-failed page.