Ghost FTP 0.99.29 — Windows/Linux source security and dead-code review (Preview candidate)

Previously published: v0.99.28. Do not rewrite its tag or assets.

Verified source change

• Windows Cloud Filter registration journal: virtualfs.json is now read with explicit I/O and JSON parse error handling. Only a genuinely absent journal is interpreted as empty. Corruption, access denial or unreadable state now blocks startup instead of discarding orphan-cleanup registration identities. An isolated Rust regression verifies absent, malformed and valid journal scenarios.
• Review scope: shared Windows/Linux React + Tauri controls, LocalFs, FolderSync, VirtualFs, credential vault, transfers, FTP/FTPS/SFTP, release packaging and audit tooling.
• Static gates: repository-wide advisory dead-code inventory, dangerous-pattern scanner, Rust clippy/fmt/tests, UI interaction contracts, Native Windows/Linux build, Windows hardening, protocol E2E. Gate success will be asserted only for this PR's exact head.

Release acceptance limitations

A source-level audit and GitHub Actions tests cannot prove physical keyboard/click, screen-reader, Wayland/X11, GNOME/KDE, production Authenticode, Windows 10/11 upgrade, real cloud credential grant, every transfer failure path or pixel-perfect equivalence with 75 unverified conceptual references. Do not declare Stable without those separate tests.