Release hardening:
- Fixed recording cancel so stale STT finalization cannot append or emit text after cancel or across sessions.
- Isolated Custom Whisper optional API keys from hosted STT provider keys and excluded them from backups.
- Strengthened Selected Text Context prompt-injection handling and fixed selected-text clipboard capture with a sentinel.
- Wired release builds to show the actual tag version in About.