release: v2.1.12 reliability and security hardening

Verify update artifacts with exact metadata and SHA-512, require host-confirmed upload completion before cleanup, harden credentials and backups, improve queue recovery and skipped-state reporting, expand Windows path coverage, and add CI packaging checks.

lib/webhook-notify.js

@@ -27,8 +27,9 @@ function summarizePerHosterFromBatch(summary) {
     if (!f || !Array.isArray(f.results)) continue;
     for (const r of f.results) {
       if (!r || !r.hoster) continue;
-      const b = out[r.hoster] || (out[r.hoster] = { ok: 0, fail: 0 });
+      const b = out[r.hoster] || (out[r.hoster] = { ok: 0, fail: 0, skipped: 0 });
       if (r.status === 'done') b.ok++;
+      else if (r.status === 'skipped') b.skipped++;
       else b.fail++;
     }
   }
@@ -61,6 +62,7 @@ function buildWebhookRequest(url, summary, meta) {
   const total = Number(summary && summary.total) || 0;
   const succeeded = Number(summary && summary.succeeded) || 0;
   const failed = Number(summary && summary.failed) || 0;
+  const skipped = Number(summary && summary.skipped) || 0;
   const perHoster = summarizePerHosterFromBatch(summary);
   const duration = formatDurationShort(m.durationSec);
 
@@ -78,8 +80,8 @@ function buildWebhookRequest(url, summary, meta) {
     const lines = [
       `**Multi-Hoster-Upload — ${headline}**${m.machineName ? ` (${m.machineName})` : ''}`,
       language === 'de'
-        ? `✅ ${succeeded} ok · ❌ ${failed} Fehler · 📦 ${total} gesamt · ⏱ ${duration}`
-        : `✅ ${succeeded} succeeded · ❌ ${failed} failed · 📦 ${total} total · ⏱ ${duration}`
+        ? `✅ ${succeeded} ok · ❌ ${failed} Fehler${skipped > 0 ? ` · ⏭ ${skipped} übersprungen` : ''} · 📦 ${total} gesamt · ⏱ ${duration}`
+        : `✅ ${succeeded} succeeded · ❌ ${failed} failed${skipped > 0 ? ` · ⏭ ${skipped} skipped` : ''} · 📦 ${total} total · ⏱ ${duration}`
     ];
     if (hosterLines) lines.push(hosterLines);
     const mention = resolveDiscordMention(m.mention);
@@ -96,6 +98,7 @@ function buildWebhookRequest(url, summary, meta) {
       total,
       succeeded,
       failed,
+      skipped,
       durationSec: Math.round(Number(m.durationSec) || 0),
       aborted: !!m.aborted,
       perHoster,