fix(recovery): resolve metadata MAC desync after recovery (R-NEW-1) & complete release workflow (CI-01)

- R-NEW-1: Recalculate metadata HMAC upon recovery-key restore and mark backup restores as PendingRebuild to rebuild transparently on first mount
- CI-01: Update release.yaml to compile both Windows x86_64 and Linux musl with pinned Zig 0.16.0 and cargo-zigbuild 0.23.4
- W-1: Implement statvfs quota determination on Unix via libc
- Add RELEASE_PROCESS.md documenting release architecture and steps
- Bump version to 0.9.2 across manifests, lockfile, docs, Scoop and WinGet

scripts/publish-release.ps1

@@ -85,7 +85,7 @@ if (-not $Release) {
     $PayloadPath = Join-Path $DistDir "release_req.json"
     $Payload = @{
         tag_name = $TagName
-        name = "Sanctum $TagName (Windows x86_64)"
+        name = "Sanctum $TagName (Windows & Linux x86_64)"
         body = $Changelog
         draft = $false
         prerelease = $false