Massu v2.5.2

Fixed

• **The reality gate's hook check was red forever, and the only way to green it was to
• The release verifier reported FAIL on a publish that had fully succeeded. It slept two
• require() of a TypeScript specifier held CI red in both repos for two days. A
• Publication to the public mirror now goes through a pull request. A direct push to the
• A bcrypt cost factor was a wall-clock budget in disguise. generateApiKey() hashes at
• Importing any of 18 hook modules executed the hook. A bare main() at module scope means
• A live destructive-path defect was hiding behind a permanently-red CI job. Three sites in a
• massu watch could start a file watcher that was dead for its entire lifetime. chokidar