Hardening release: file locking, data-loss guards, multi-OS CI, release checks, and checksum assets.

Initial private release