build: inject version via ldflags instead of hardcoding
chore: fix filename typo memmorystore → memorystore
chore: remove dead code (LoadConfigFromEnv, commented-out lines)
fix(auth): check token store Set errors
fix(certgen): reduce CA cert validity from 10 to 5 years
fix(client): replace fixed 8KB buffer with ReadAll
fix(config): return parse errors instead of silent ignore
fix(daemon): check Set/Delete errors in command handlers
fix(daemon): fix unreachable expired-token branch
fix(daemon): log shutdown errors, wait for background tasks
fix(daemon): remove InsecureSkipVerify from outbound TLS
fix(daemon): stop busy-loop on socket accept errors
fix(storage): RWMutex for FileStore, sentinel errors, defensive copies
fix(storage): add mutex to KeyringStore for thread safety
fix(storage): add mutex to PassStore for thread safety
fix(storage): restore mutex protection in KeyringStore.Dump
fix(storage): stop token secret leak to stdout in pass store
refactor(api): remove pointer-to-interface anti-pattern
refactor(daemon): extract store creation from nested if-else