Ghost FTP 0.99.27 — post-merge release integrity fixes (Preview candidate)

Previously published: Ghost FTP v0.99.26 Preview, containing 25 source-pinned artifacts.

Corrected

• Fix the GitHub Actions post-merge metadata verification failure that appeared after PR #255.
• Explicitly quarantine the incomplete historical v0.99.24: verify the exact 13 currently observable asset IDs, names, sizes and SHA-256 digests; fail on further drift and emit a warning. The original >=21/25-asset provenance is still unresolved; do not fabricate or overwrite assets.
• Correct v0.99.25 from misleading stable metadata to Preview only after verifying its immutable tag, source commit and complete 25-artifact inventory.
• Require the source-matched Preview metadata/integrity workflow to pass before automated release publication.
• Add executable mocked GitHub API regression tests that exercise valid metadata correction and reject asset tampering.
• Synchronize the Windows/Linux Tauri, Android, macOS and Go tooling release metadata and documentation to v0.99.27.

This remains a development Preview. It does not constitute independent penetration testing, production platform signing or installed-device acceptance. The v0.99.24 asset disappearance is an open historical integrity incident.

Details: Repository-wide audit and incident.