Changelog

• 428e5fb feat(fixture): mask emails and IPv4 in scrub free-text
• 756d099 fix(cache): restrict cache dir/files to owner-only perms
• 6651ee3 fix(render): neutralize CSV formula injection in export
• 7154698 fix(render,tui): strip ANSI/control chars from output