fix: harden recovery, handoffs, and cross-platform diagnostics

[rebel0789]

Summary

This PR is the reviewed recovery patch for the restored public repository. It hardens the MCP server, fixes the actionable issue queue, adds cross-platform diagnostics, and includes the complete verification report in RECOVERY_REPORT.md.

Included fixes

• Correct apply_patch skipped-patch detection and nearest-repository Git scoping.
• Add bounded Codex transcript search/read-around support.
• Make search fallback/backend state and connector request/dispatch diagnostics visible.
• Make self-test probes reversible and independent, with Bash/Git/toolchain diagnostics.
• Align timeout schema and runtime limits; avoid large stats-only diff materialization.
• Add default absolute-path redaction, HTTP hardening, and explicit workspace-ID behavior.
• Decode Windows Bash output safely and select native Git for Windows Bash by default; WSL is explicit.
• Make handoff receipts interruption/orphan-aware and block standard remote Git/GitHub mutation paths by default.
• Document the maintainer security contact and advisory route.

Verification

npm run release:check passed, including build, all smoke suites, stress tests, npm audit --audit-level=high with 0 vulnerabilities, and npm package dry-run.

Issue links

Fixes #111
Fixes #107
Fixes #106
Fixes #105
Fixes #104
Fixes #103
Fixes #102
Fixes #101
Fixes #100
Fixes #99
Fixes #98
Fixes #91
Fixes #88
Addresses #110

Issue #127 was already implemented in the restored main branch. Issues #65, #71, and #93 are external ChatGPT/Plugins client behavior and cannot be fixed by repository code. Optional third-party ffgrep/CodeGraph support in #33 remains a separate compatibility/security design.

The compatible handoff-integrity work from open PR #130 is included and extended here; this PR should be reviewed as the consolidated recovery change.