v0.4.17

Summary

• Engine 6.20.36: bounded /tmp cleanup permissions, clearer execute/patch diagnostics
• App version bump (DMG via ./build.sh when shipping binary)