This release is unsigned. HTTPS plus the server-published SHA-256 and exact size protect transport and integrity, but do not establish a Windows publisher identity.
No .env, token, password, private key, certificate, database dump, vendor, node_modules, or user data is included.
The updater refuses non-HTTPS downloads, size mismatches, SHA-256 mismatches, failed application shutdown, and failed pre-update backups.
