Ghost FTP v0.95.45 — Windows/Linux stability and backup safety

Development preview only. Latest published predecessor: v0.95.44. Keep that tag immutable; this is not a release announcement.

Scope

Validate encrypted backup SQLite payloads before modifying OS credentials.
Check staged restore integrity and metadata before changing existing files. If startup rejects an invalid staged backup while the prior database exists, keep original data and recovery artifacts available.
Safeguard private backup file replacement against symlinks and interrupted writes; retain SQLite recovery snapshots, do not silently truncate existing backups.
Improve credential deletion and debug redaction, fix built-in editor double-click race, and reject unsupported SQLite migration versions.
Preserve 0.95.44 compatibility, user profiles, settings, Brendigo identity, and locked/keyring-failure privacy. Android and macOS feature code is unchanged (shared release metadata only).

Quality, protocol E2E, Windows hardening, Windows/Linux native build, Android and macOS compatibility verified on the same final SHA.
Verify real Windows Credential Manager and Linux kernel-keyutils vault failures, recovery from corrupt backup, application startup, OS permissions and installed desktop package behavior.
Test upgrade with existing user DB/WAL/SHM, profiles and prior encrypted backup file; evaluate full multi-file restore transaction separately.
Do not merge or publish from partial/cancelled workflows. Existing version tags remain immutable.