Lore Server: all versions and old releases

Changes since v0.8.5.
Breaking changes
- lore-client: logging CLI arguments are now strictly mutually exclusive; a command line passing conflicting logging flags is rejected instead of silently accepted
- Auth login/info now return NotSupported (code 18) when the server has no auth endpoint configured, and surface NotAuthenticated / Disconnected instead of a generic internal error (code -1); scripts branching on these exit/FFI codes must be updated
- Presigned URL vending (POST /v1/repository/{id}/content/{address}/presign) is now restricted to service accounts; normal user tokens can no longer mint presigned URLs
Features
- lore-server: forward BranchList and RepositoryCreate to a remote Lore server when configured (extending the existing BranchCreate/BranchDelete/BranchGet forwarding)
- lore: add a batch node-add verb (lore_revision_tree_add) to the low-level revision API, landing a whole subtree atomically
- lore: run the service process (lore service run) on Linux and macOS, not just Windows
- lore: validate that all strings passed to the C API are valid UTF-8, rejecting invalid input up front with a named field
- lore-server: support file:// JWKS endpoints in the JWK service
- lore-revision: optional durable_delay on the composite store so read replicas can answer before the durable tier is queried
- lore-storage: self-heal corrupt (torn-write / zero-filled) mutable store buckets instead of failing to open the store
- lore-server: add Cache-Control headers to the presigned-URL redeem endpoint for immutable content
- Add a self-contained Terraform example for an AWS primary + edge deployment under contrib/aws/
Fixes & Improvements
- lore-storage: read_into now respects the requested byte range for single-fragment reads (partial reads of files ≤ 256 KiB no longer fail)
- lore-server: fix JWK refresh cache check so a missing/rotated key triggers a fetch, allowing key rotation without a restart
- lore-credential: require a DNS label boundary when matching a dotless JWT aud, and allow exact apex-domain matches, closing an audience-suffix leak
- lore-revision: preserve dirty move status through status --scan instead of degrading it to delete + add
- lore-revision: bound commit read memory with a travelling fragment permit, and cap directory recursion fan-out during commit
- lore-revision: drain staging tasks on all error paths so failures propagate cleanly
- lore-storage: batch FastCDC chunking to cut per-chunk overhead on medium/large writes
- Add transport connect timeouts so local reads no longer stall on an unreachable remote
- lore: use the calling process's working directory for absolute-path resolution in the service process
- Fix lore_branch_switch and lore_branch_reset to restore the branch name→id mapping (so the branch appears in the local list), with a --force override
- lore-revision: fix restore failing with Dirty node remain after nodes were committed
- lore-base: update vendored rpmalloc to 2.0.1

Changes since v0.8.4.
Features
- Implement the low-level revision-tree read verbs on the C API: tree_load/tree_close, resolve_path, list_children, revision & node info, and node_path
- Forward BranchCreate, BranchDelete, and BranchGet to a remote Lore server, opt-in per-RPC under [server.grpc_public_services.forwarded_requests]
- Add repository info --local to read repository metadata from the local store without contacting the remote
Fixes & Improvements
- Fix a corrupt-tree race in concurrent node_add where a half-initialized node could be observed on the child chain
- Protect non-durable local-only fragments from being orphaned by store GC eviction/compaction
- Fix dirty-add reclassifying remaining files when committing multiple added files individually
- Parallelize staging of multiple explicit paths instead of a serialized per-path loop
- Make CLI paths relative to the current working directory across all path-printing commands
- Bump anyhow, crossbeam, and memmap2 for security advisories

Changes since v0.8.3.
Features
- Add --dry-run to revision commit and lock acquire/release
- Run incremental store GC by default; replace --gc with --no-gc to disable
- Expose the mutable store through the low-level storage C API
- Add ForwardedRevisionService gRPC endpoint to forward BranchCreate to a remote server
- Carry structured error detail and FFI codes on the Complete event
- Show staged renames as moves in diff output
- lore status prints paths relative to the current working directory
Fixes & Improvements
- Fix use-after-free in write_fragmented when the chunker future is cancelled
- Fix LoreArray<T> dealloc layout mismatch in Drop
- Fix commit --stats panic and report real fragment stats
- Fix link contents surfacing as parent adds in file diff
- Fix clone not materializing view-filtered directories with all-excluded children
- Reject malformed metadata set args instead of panicking; default branch metadata to current branch
- Reset staged add/remove/update for link nodes
- Propagate dirty to committed ancestor directories on dirty add
- Make dirty add idempotent so a repeat dirty doesn't duplicate the node
- Stage empty dirty-added directories by their own path
- Honor --dry-run on branch push
- Rename [server.replication] config to [server.grpc_internal] (not backwards-compatible)
- Map GRPC storage errors correctly and stop classifying Unknown/EOF errors as server errors
- Handle thin-client RevisionDiff/RevisionTree RPCs with a zeroed revision
- Tag linked-repo RevisionDiff changes with an indexed partition table
- Standardise HTTP tracing and log levels
- Seed QUIC clients with an initial CWND on regeneration
- Remove redundant dry_run field from lock events
- Rename shared store config file to shared_store.toml with auto-migration
- Change stats flag to u8 for C ABI consistency