Normalize empty XDG cache settings at their owner and preserve damaged signed
evidence as a backup when approved setup publishes an authenticated replacement.
Keep read-only admission strict and retain incomplete publisher cleanup through
client cancellation, restart admission and shutdown retry.
Verify offline evidence with isolated module state and observed PGP/native
inspection, remove vendor-network dependence from the foreign-launcher doctor
test, and bound small feed/key requests separately from package downloads.
Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com>
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com>