Release Motif v0.2.0

[oshtz]

Summary

• harden the Electron runtime, local API boundary, encrypted provider credentials, database migrations/backups, and updater behavior
• improve generation streaming, validation, board workflows, direct editing, gallery thumbnails, onboarding, and accessible confirmation dialogs
• consolidate npm workspaces under one lockfile and add release/security/artifact verification
• prepare package metadata and release automation for v0.2.0

Verification

• npm ci
• npm run lint
• npm run check:genomes
• npm run check:desktop-security
• npm run check:release -- v0.2.0
• npm audit --omit=dev --audit-level=high
• npm test
• npm run smoke:e2e
• npm run smoke:quality:ci
• Windows unpacked, silent installer, and portable persistence smoke
• Windows checksum and updater metadata verification

Release gate

The tag must not be pushed until WINDOWS_CODESIGN_CERTIFICATE and WINDOWS_CODESIGN_PASSWORD are configured. macOS signing/notarization secret names are already present.