release: v2.1.12 reliability and security hardening

Verify update artifacts with exact metadata and SHA-512, require host-confirmed upload completion before cleanup, harden credentials and backups, improve queue recovery and skipped-state reporting, expand Windows path coverage, and add CI packaging checks.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "multi-hoster-uploader",
-  "version": "2.1.11",
+  "version": "2.1.12",
   "description": "Upload files to doodstream, voe, vidmoly, byse simultaneously",
   "main": "main.js",
   "scripts": {
@@ -8,6 +8,7 @@
     "dev": "node scripts/dev-runner.cjs",
     "test": "node --test tests/*.test.js tests/ui-smoke.js",
     "test:backup-api": "npm --prefix services/backup-api test",
+    "verify": "npm run lint && npm test && npm run test:backup-api && npm audit --omit=dev",
     "lint": "eslint .",
     "dist": "electron-builder --win",
     "release:win": "electron-builder --publish never --win nsis portable"
@@ -15,13 +16,13 @@
   "dependencies": {
     "chokidar": "^3.6.0",
     "undici": "^7.29.0",
-    "ws": "^8.21.0"
+    "ws": "^8.21.3"
   },
   "devDependencies": {
-    "electron": "^41.3.0",
-    "electron-builder": "^26.8.1",
-    "eslint": "^10.1.0",
-    "eslint-plugin-security": "^4.0.0",
+    "electron": "^41.10.5",
+    "electron-builder": "^26.15.3",
+    "eslint": "^10.8.1",
+    "eslint-plugin-security": "^4.0.1",
     "rcedit": "^4.0.1"
   },
   "build": {