Harden data integrity, privacy, and audit safeguards

[devlikebear]

Summary

• prevent stale scene saves with keyed debounce, serialized writes, and optimistic content-version checks
• add verified backup and startup recovery flows, atomic sync/import behavior, and migration integrity guards
• require explicit AI data-sharing consent and align Korean, English, and Japanese privacy/localization copy
• narrow Tauri IPC and file-opening access, preserve structured RPC errors, and add lint/dependency audit gates
• include the full audit report and bump the release version to v0.9.2

Test plan

• make ci
• GOTOOLCHAIN=auto go test -race ./...
• cargo test --features mas
• PATH="$(go env GOPATH)/bin:$HOME/.cargo/bin:$PATH" make audit
• make validate-distribution
• git diff --check

[sonarqubecloud]

Quality Gate passed

Issues
14 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.6% Duplication on New Code

See analysis details on SonarQube Cloud