BoltClam 1.0.0: ClamAV desktop protection with Bolt sign-in

Adds the PyQt6 Windows client (Homepage, Scan & results, About & updates, Settings), ClamAV scanning and quarantine, browser-download watch with an exclusive scan gate, Bolt loopback/PKCE sign-in with DPAPI key storage, Gitea release feed with checksum verification, opt-in diagnostics, and Windows/portable build tooling.

Co-Authored-By: Claude Code <noreply@anthropic.com>

CHANGELOG.md

@@ -0,0 +1,23 @@
+# Changelog
+
+## 1.0.0 — 2026-10-25
+
+Initial BoltClam release.
+
+- PyQt6 Windows desktop app with Homepage, Scan & results, About & updates,
+  and Settings screens.
+- ClamAV full-disk and all-user-home scanning, live progress, scan history,
+  detection actions, and quarantine restore/delete.
+- Browser-download watcher for Chrome, Edge, Brave, Firefox, Vivaldi and
+  Opera download folders, with an exclusive-handle scan-before-open gate
+  and configurable automatic response.
+- Bolt browser sign-in using the desk API loopback/PKCE flow, with the key
+  stored in Windows DPAPI.
+- Account/subscription display and update notifications from the BoltClam
+  Gitea release feed, including release/beta channels and checksum
+  verification.
+- Opt-in diagnostics upload with token/password/path redaction.
+- Portable Windows build, PyInstaller spec, Inno Setup installer, and Gitea
+  release workflow.
+- Additive Bolt API endpoints: branded sign-in page, account, release proxy,
+  diagnostics intake, and owner-only log access.