fix(incus): cloning fails with mac address conflict

Remove volatile keys from incus config upon clone

fix: use renameio maybe.WriteFile for cross-platform atomic state saves

docs: expand MCP documentation with config options, auth warnings, na…

…ming, and base security notes

fix: Windows build failure due to missing SIGWINCH

Move SIGWINCH terminal resize handler into platform-specific
winchControl() function. Unix version handles resize via
syscall.SIGWINCH, Windows version returns nil (no resize).

test: add WriteContainerFile and ReplaceContainerRootfs tests

Coverage for internal/truenas goes from 68.8% to 83.8%. Tests cover
the rootfs path construction, config/write errors, cron job lifecycle
(create, run, delete), and ZFS path validation for unsafe characters.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Merge pull request 'feat: self-contained zmx provisioning' (#7) from …

…worktree-zmx-provision into main

Reviewed-on: https://forgejo.tail9a847c.ts.net/sh/pixels/pulls/7

refactor: replace manual env overrides with caarlos0/env

ci: add release workflow with GoReleaser and git-cliff changelog gene…

…ration