Keyward 0.2.0

Windows and Linux hosts — the three-platform installer matrix closes.

Added

• Windows host (WinUI 3 / C++/WinRT): product sidebar with status
  dots and fingerprints, product detail with KV chips and entry cards,
  copy-to-clipboard (values never display), PEM import through the file
  picker, delete and key-generation confirmations, the snapshots dialog,
  and the Choose Vault / Deep Check / Snapshots / About menu
  (Ctrl+O / Ctrl+R / Ctrl+L).

• Linux host (GTK4): the same surface — a GAction menu with the same
  shortcuts, product list, entry rows with clipboard copy, the snapshots
  dialog, and an About dialog carrying Keyward v<version>, the
  AGPL-3.0 line and a Report-an-Issue link.

• Windows release leg: MSI (WiX 5) + portable zip, with per-file
  SHA-256 sidecars; no update feed — a key vault does not update itself.

• Linux release leg: x64 + arm64 matrix building tar.gz + deb + rpm +
  AppImage + portable zip with a CycloneDX SBOM, plus stable direct-link
  aliases (keyward-windows-x64.msi, keyward-linux-x64.deb/AppImage).

• Host CI: windows-host (raco rivet build + launch smoke) and
  linux-host (GTK4 build + headless boot smoke under xvfb) jobs, so a
  release job is never the first place native source compiles.

• Linux AppImage branding: the 512 px vault-dial icon (linux-icon) and
  an explicit linux-formats selection in rivet.rktd.

• Help ▸ About: an About sheet carrying the Keyward v<version>
  line (bundle version, falling back to the generated Rivet config), the
  product line ("local by design"), the AGPL-3.0 license line, the site
  (keyward.jrtx.site) and a Report-an-Issue link to the GitHub tracker —
  a bug report starts one click from the failure it describes.

• GitHub issue templates (bug report + feature request) so feedback
  lands structured and safe: the bug form asks for the vault location
  shape and names what must never be pasted — key values and section
  bodies — while pointing at fingerprints as the shareable identifier.

Changed

• The win/linux hosts consume Rivet as the package library (rivet#238):
  the Linux build add_subdirectories the rivet platform and links
  rivet::platform, and the Windows project references the rivet-host
  static library (forwarding the hybrid-CRT RuntimeLibrary choice) — no
  host project ClCompiles rivet sources anymore, so rivet adding a
  translation unit needs no downstream change.

Fixed

• The 0.1.0 entry's date now reads 2026-10-14, the day the release
  actually shipped.
• The Windows sidebar Snapshots tile shows the real snapshot count —
  refreshed with every product refresh and after snapshot-taking
  mutations — where it previously read a constant "·".
• The Linux About dialog's website row points at the GitHub issue
  tracker ("Report an Issue"), the same one-click bug-report surface as
  the macOS and Windows About sheets.
• The Windows exe and MSI carry the vault-dial icon: windows-icon
  (assets/branding/app.ico, generated by scripts/gen-icon.swift) joins
  rivet.rktd — an iconless MSI shortcut was a silent defect.