blick: matoleo yote na matoleo ya zamani

Changelog
- ed7df94: Show an email's To and Cc and a chat's members when viewing them (@anderix)

Changelog
- deac907: Register the tray with the panel only after its menu is set (@anderix)

Changelog
- 25ef18b: Serve the tray icon ourselves, drawn at every panel size (@anderix)

Changelog
- fcb53dc: Offer to unlock a locked keyring, refuse to lose a sealed address book, and add contacts edit (@anderix)

Changelog
- 33b4302: Ignore goreleaser's output directory (@anderix)
- 7aa7e08: Remove ship.conf; the release apps read ship.toml (@anderix)
- 73ddd1f: Retire the release workflows (@anderix)
- aaf111c: Run CI by hand: workflow_dispatch instead of push and pull request (@anderix)
- a3e08dc: Say when the token and contacts are stored unencrypted (@anderix)
- 0362679: Store the token and contacts unsealed when atrest's key would not survive a reboot (@anderix)
- 861fbc7: chore: refresh dependencies (@anderix)

- Seal token.json and contacts.json with atrest

- apt_repo, not apt_package
- Package versions stop coming from Dependabot
- Dependabot merges move to the organisation's sweep
- The profile is targets and names
- Retire the curl installer: apt, Homebrew, winget and cargo are the paths
- Dependabot: monthly, grouped, merged when every run on the commit is green
- Delete the Defender scan caller: the scan never predicted winget's validation
- Delete the release document: ship is the procedure
- Give the remediation path a user actually has
- Regenerate the parameter block from ship.conf
- Say Go 1.26, which is what building now takes
- deps: bump golang.org/x/oauth2 in the go-modules group (#10)
- Rename release.conf to ship.conf
- Take the commands to smoke from release.conf
- Run the arm64 packages before anybody installs them
- Add release.conf, the parameter block a script can read
- Rename ignored session note to next.txt

Changelog
- 8874b29: Document the Inbox-only queue and the junk marker in search (@anderix)
- fd6c042: Mark search hits that live in Junk Email (@anderix)
- e4ba167: Read the unread queue and inbox view from the Inbox folder, not the whole mailbox (@anderix)
- fcd7d0b: Render Junk Email hits the way Outlook does: links inert, attachments blocked (@anderix)
- 2a8b1da: Updated gitignore (@anderix)
- 0368ee2: Validate the release install with Defender before submitting to winget (@anderix)

Changelog
- 103aabc: Call the fleet's CodeQL scan instead of holding a copy of it (@anderix)
- 61bdb59: Document the release loop in RELEASING.md (@anderix)
- 90936b2: Drop data: and vbscript: hrefs the way javascript: ones already were (@anderix)
- 8f1caf5: Move the main package to cmd/blick so go install names it blick (closes #7) (@anderix)
- 4aa7c4d: RELEASING: make apt the step you cannot skip (@anderix)
- 13df9cc: Run the fleet's Go CI on every push and PR (@anderix)

Changelog
- bc24a32: Add WinGet install instructions to README (@anderix)
- 14a002e: Add a dated status and a "start here" opening to BACKLOG.md (@anderix)
- abc7163: Make the module path resolvable so go install works (@anderix)
- 1b15464: Report the real version when installed with go install (@anderix)