fix: Licora v5.1.1 quality and stability release

[vib-tools]

Licora v5.1.1 — Quality & Stability Release

Summary

Implements Phase 2.1 in Zero Freedom Development mode. Upgrades Licora from v5.1.0 to v5.1.1 through verified quality, stability, compatibility, and production-readiness corrections only.

Verified issues fixed

• Prevents technical exception messages, source paths, and line numbers from being returned publicly.
• Removes absolute server-path disclosure from installer requirements.
• Rejects installer Base URLs containing credentials, query parameters, or fragments.
• Rejects CR/LF control characters in Mail From Name.
• Maps unexpected installer exceptions to safe consistent messages.
• Validates installer-generated application and security secrets before activation.

Validation added

• Dedicated quality/stability test suite.
• Safe error-output assertions.
• Base URL and mail-header validation tests.
• Installer permission-detail redaction checks.
• Version-consistency checks.
• Existing compatibility, security, and installer tests retained.

Zero Freedom guarantees

• No database schema or migration changes.
• No business-logic, license-engine, API-contract, route, UI, cron, CSS, or JavaScript changes.
• No historical log deletion.

Release gate

Manual browser and database-backed regression validation is required before merge/tag.

[vib-tools]

Existing-upgrade release-gate correction

Manual v5.1.0 to v5.1.1 upgrade validation found that an installer-generated APP_VERSION=5.1.0 value in preserved private configuration could pin the actual runtime version to 5.1.0.

Corrected in commit: 6887fe0

Verified after correction:

• Original private configuration preserved byte-for-byte
• Existing database and application data preserved
• No migration introduced
• Actual upgraded runtime version: 5.1.1
• Compatibility, security, installer, and quality/stability tests passed
• PHP 8.0–8.4 pull-request CI passed