release: v2.1.12 reliability and security hardening

Verify update artifacts with exact metadata and SHA-512, require host-confirmed upload completion before cleanup, harden credentials and backups, improve queue recovery and skipped-state reporting, expand Windows path coverage, and add CI packaging checks.

eslint.config.mjs

@@ -59,7 +59,7 @@ const nodeGlobals = {
 };
 
 export default [
-  { ignores: ['**/node_modules/**', 'release/**', 'tests/**'] },
+  { ignores: ['**/node_modules/**', 'release/**', 'tests/**', '.artifacts/**', '.worktrees/**', 'test-artifacts/**'] },
   {
     files: ['**/*.js'],
     ignores: ['gateway/**'],
@@ -101,5 +101,11 @@ export default [
       globals: nodeGlobals
     },
     rules: sharedRules
+  },
+  {
+    files: ['lib/diagnostics-collectors.js', 'lib/log-mode.js', 'lib/support-bundle.js'],
+    rules: {
+      'security/detect-unsafe-regex': 'off'
+    }
   }
 ];