Release Notes

• jsch bumped to 2.28.4 (better Ed25519 support)
• bouncycastle (bcprov-jdk18on) 1.78.1 → 1.84
• junit-jupiter 5.10.2 → 6.1.1, mockito-core/mockito-junit-jupiter 5.14.2 → 5.23.0
• maven-shade-plugin 3.5.1 → 3.6.2, maven-surefire-plugin 3.5.4 → 3.5.6,
  exec-maven-plugin 3.2.0 → 3.6.3

Docs

• Documented how to install a CA-signed TLS certificate (Let's Encrypt walkthrough).
• README reorganized (migration section moved, feature list reordered), homepage link added,
  screenshot fixes.

Upgrading from v4

Use tools/migrate to bring your data forward — see tools/migrate/README.md.
Password hashes migrate as-is; existing users can log in immediately without a
reset.