Harden portability and campaign state

[crypt0rr]

Summary

• Make temporary-file, session-log, and multi-wordlist paths portable on supported Apple Silicon macOS.
• Make the interactive menu exit cleanly when stdin reaches EOF.
• Treat campaign state paths defensively and reject manifest-controlled paths that escape private campaign state.
• Add focused campaign-manifest regression coverage and update the backlog/version documentation.

Why

The runtime still had GNU-specific filesystem assumptions, the menu could redraw forever after stdin closed, and a crafted campaign manifest could point restore or preserved-input cleanup paths outside the campaign sidecar.

Validation

• make test-smoke
• make test-campaign
• make lint
• Pinned shfmt v3.8.0 format check
• Bash coverage: 100% lines/functions; baseline satisfied
• Python coverage: 54.13% vs 48.47% baseline
• Bash syntax and diff checks

Real Apple Silicon validation for macOS options 10, 11, and 17 remains a manual follow-up; Intel macOS remains unsupported.