TautWeekly for Plex v0.19.0

v0.19.0 brings the approved custom-title GIF experience into every production
package and makes the Manager's local recovery/history surfaces predictably
bounded.

Custom title GIFs

The custom text card's Optional title field now has an in-field local GIF
selector. Choose exactly one of Celebrate, Construction, Rocket,
Tickets, Warning, or Alert. The selected 24×24 preview replaces the
empty add-reaction glyph inside the field. Select it again, or focus the control
and press Delete or Backspace, to clear it. Enter, Space, arrow keys, Home, End,
and Escape are supported, including the responsive mobile layout.

The title text and asset ID remain separate configuration values, and title
uppercasing is unchanged. In generated newsletters the selected GIF is placed
immediately after a non-empty rendered title at 18×18 pixels, with the same
alignment in all six preview states. Email attaches only the referenced local
GIF as an allowlisted image/gif CID. Missing assets or missing/unsafe legacy
IDs fall back to no GIF without preventing startup or newsletter rendering.

Rolling local retention

• Configuration backups retain the newest 10. Each new overflow backup removes
  the oldest, including backups produced by expert/recovery scripts and the
  pre-restore safety path.
• Recent completed Manager operations retain the newest 20 by count-only FIFO.
• Sanitized configuration diagnostics retain the newest 20 by count-only FIFO.

Startup and read paths normalize existing excess safely. Canonical Manager and
legacy expert timestamp names remain listable, restorable, deletable, and
subject to the same backup cap. Unrecognized files, directories, and symlinks
are not adopted as backups.

Update existing installations

Back up private data, then use the documented update path for the installed
package. No manual migration is required. A missing CustomTextCardTitleGif
means no selection. Existing supported custom-card settings are preserved by
the expert setup fallback, while unsafe asset IDs normalize to no selection.

The backup/history caps are applied automatically. This may remove only the
oldest recognized overflow records or configuration backups; live
config.json, current operation state, credentials, schedules, output, and
unrecognized files are not retention targets.

Security and privacy

All six GIFs are packaged byte-identically and served locally. The renderer
does not accept paths, filenames, URLs, MIME overrides, or arbitrary CIDs from
configuration. The Manager has no runtime Google Fonts or other network asset
dependency. Backup and history APIs expose only their existing sanitized
metadata plus explicit maximum-count and retention-policy fields.

Validation

The release is covered by Manager unit and API tests; startup and overflow
normalization; PowerShell 5.1 and 7 retention tests; renderer allowlist,
placement, dimensions, preview, plain-text, and selected-only MIME/CID checks;
all-six-state integration rendering; exact asset SHA-256 checks in every ZIP
and tar package; Manager JavaScript and accessibility checks; cross-platform
builds; reproducible archives; installer lifecycle coverage; container builds;
and desktop/mobile keyboard browser QA.