fix: harden upload cancellation and audit logging

Preserve pre-start and batch cancellation requests, reject late upload success after cancellation, and wait for cancellation acknowledgements before removing queue entries.

Separate formatted link logs from privacy-safe source cleanup and upload plan audits, persist audit fallback paths, redact support bundles, and expose audit diagnostics safely.

Improve queue selection and destructive-action clarity, show the Settings save action only while changes are pending, and add regression coverage for all updated behavior.

scripts/verify-public-release.mjs

@@ -58,6 +58,7 @@ const sourceFiles = [
   'lib/throttle.js',
   'lib/throttled-cache.js',
   'lib/updater.js',
+  'lib/upload-audit.js',
   'lib/upload-log.js',
   'lib/upload-confirmation.js',
   'lib/upload-diagnostics.js',
@@ -146,6 +147,7 @@ const sourceFiles = [
   'tests/ui-network-safety.test.js',
   'tests/ui-smoke.js',
   'tests/updater-version.test.js',
+  'tests/upload-audit.test.js',
   'tests/upload-log.test.js',
   'tests/upload-confirmation.test.js',
   'tests/upload-diagnostics.test.js',