Portmaster privacy-filter audit, quarantine restore hardening, and scanner reliability fixes
- Add an optional Portmaster privacy-filter check to the security audit that reports running, installed, or not-installed status and per-module health without affecting summary counts when Portmaster is absent
- Harden quarantine restore handling against unsafe path and metadata manipulation (GHSA-xhhj-qvvr-vhwq)
- Fix full scans hanging mid-run by draining ClamAV stderr concurrently with stdout so the scanner no longer deadlocks on a full pipe buffer
- Improve system-tray compatibility under Flatpak and stricter StatusNotifierItem hosts (Plasma 6, Ayatana, xapp-sn-watcher) with ARGB icon fallbacks and attention-icon handling
- Document installation via AppMan / AM in the install guide
- Refresh Python and Flatpak runtime dependencies, including cryptography, urllib3, certifi, packaging, and PyGObject