fix(repo): release v1.4.1 — trust and correctness

[ikelaiah]

Motivation

Correct beginner-facing Git recovery guidance and establish behavioral release coverage.

Correctness fixes

• Preserve staging only with git stash pop --index.
• Replace fixed reflog-retention claims and unsafe force-push repair copy.
• Make pull, abort, and secret-recovery alternatives explicit.

Testing and CI

• Add seven dependency-free real-Git integration tests.
• Keep unit/data tests and validators; npm test runs the complete suite.
• Add GitHub Actions CI for pull requests and main.

Safety and release hygiene

• Tighten recovery risk labels and validate that safe cards cannot include destructive/history-rewriting commands.
• Bump version, README, and changelog to 1.4.1.

Validation

• npm test
• git diff --check