v0.7.9

Windows updater recovery

Paneflow 0.7.9 fixes a Windows self-update regression introduced in 0.7.7.
Older Windows clients pinned the MSI publisher as O=Strivex, while the signed MSI certificate is O=StriveX. The MSI was valid, but the client rejected it after download and surfaced the misleading "corrupt or tampered" update error.

What changed

• Corrected the Windows MSI publisher pin to StriveX.
• Added a Windows release smoke check that compares the pinned publisher in Rust with the actual Authenticode subject on the signed MSI.
• Changed release publishing so GitHub Releases stay draft-only until every signed asset has been uploaded and verified.

Windows upgrade note

If you are already on Paneflow 0.7.7 or 0.7.8 on Windows and the in-app updater reports a corrupt or tampered download, install 0.7.9 manually from the MSI once. After 0.7.9 is installed, future Windows updates should use the in-app updater normally again.

Full Changelog: v0.7.8...v0.7.9