Release 0.7.1: security fixes

[Commanderx-code]

Change

Prepares the 0.7.1 security release. It ships the five fixes merged in #8, which are not in any published release yet.

• Bumps the version to 0.7.1 in package.json, package-lock.json, Cargo.toml, Cargo.lock, tauri.conf.json, and the Arch PKGBUILD and .SRCINFO.
• Adds a 0.7.1 section to CHANGELOG.md and rewrites docs/release-notes.md, which becomes the GitHub release body. The notes follow the 0.5.1 security release: security fixes, behaviour changes, then downloads.
• Updates the download links and install commands in README.md, docs/installation.md and docs/releases.md.
• Updates docs/user-guide.md: Restic settings now say that repository addresses with an embedded password, including rest:, are refused, and point to RESTIC_REST_USERNAME and RESTIC_REST_PASSWORD.

Validation

• npm run check: passed. This includes the version-alignment check.
• npm test: 78 passed.
• cargo test: 71 passed.

Review notes

• The changelog and release notes are dated 2026-09-25. Adjust the date if the tag goes out later.
• After merging, release as usual:
  1. git tag -a v0.7.1 -m 'Command Center v0.7.1' and git push origin v0.7.1.
  2. Wait for the tag's Linux packages run to pass.
  3. Run npm run release:draft -- v0.7.1 and verify the hosted assets before publishing.
• The Wiki isn't versioned with the code. After publishing, update its Restic credentials page to match the new user-guide line, and update the "Written for Command Center" line in Home.md and _Footer.md.

🤖 Generated with Claude Code