v0.64.8

Changelog

• af1438b Bump version to v0.64.8
• 5945423 Merge commit from fork
• b6831c4 Merge commit from fork
• a5c92c4 Merge pull request #874 from YodHeVauHe/cursor/savings-etag-record-order-1a9e
• 4532908 Merge pull request #875 from vkozio/fix/windows-sharing-violation-retry
• 6c5ab93 Merge pull request #876 from peterkc/docs/daemon-http-addr-path
• e129655 Merge pull request #877 from zzet/dependabot/go_modules/go-minor-patch-5fbebd389c
• 7bcf132 Merge pull request #878 from zzet/fix/checkout-observe-rebound-test
• 30dc254 Merge pull request #880 from davalillo/fix/hooks-probe-repo-clamp
• 5d3e2e3 Merge pull request #882 from rolldav/fix/session-scoped-relative-file-paths
• 1c0a6fb deps(deps): bump modernc.org/sqlite
• 7bd2f9e docs(daemon): describe daemon.http_addr and install-service PATH capture
• f657f2b fix(hooks): clamp symbol probe evidence to the probed path's repo
• c612399 fix(mcp): do not record savings on not-modified read-family polls
• 5e70d98 fix(mcp): scope relative file paths to the session workspace
• fa52a71 fix(platform): retry Windows sharing violations on the write and delete paths
• 8c959cf fix(security): prevent shell injection in plugin publishing workflow
• a4bb44a fix(security): reject untrusted browser origins on HTTP tool APIs
• 485c2cf test(indexer): judge the rebound-marker refusal on its own job
• 28c991d test(mcp): settle batch_symbols before the not-modified savings check