v0.4.14

Summary

• Engine 6.20.33: /tmp write_file sandbox parity, secret CRLF scrub, prefer python3
• App version bump (DMG: build locally with ./build.sh when shipping binary)