testing

hotspots v1.35.1–v1.35.4: an audit, twelve fixes, four days

Four releases, twelve PRs, and a pattern once I lined them up: most of these weren't reported by users hitting a wall. They were found by someone going looking — auditing coverage gaps, re-checking an old fix's scope, or just noticing a git config file that shouldn't have changed.