Release v3.5: USB-card recovery, per-card adaptive buffer, one user folder, audit fixes

- Recover an unplugged/replugged output sound card automatically (issue #5):
  detect the dead WASAPI device and remember the receive-output selection so it
  re-ticks and re-opens when the card returns.
- Adaptive per-card WASAPI buffer target sized to each card's pull chunk, held
  stable so it never flits about under CPU/network load.
- Consolidate all per-user data (config, profiles, logs, sounds) into one
  "user settings and logs" folder; migrate every older layout; exclude it from
  the updater so custom cue sounds now survive updates.
- Mic-privacy detector: warn once when a Windows-blocked mic is switched on, or a
  profile loads with one already on.
- All warning/notice dialogs now come to the foreground even when minimised.
- Apply volume + mute on profile load (were saved but not restored).
- Crash-safe (atomic) profile/config saves.
- Fix two resource leaks (push-mode capture MMDevice; UPnP DeviceFound handler).
- Remove dead code (baseline-diff machinery, dead ASIO probes, no-op stubs).
- Docs: readme.html, MANUAL.md, About-box changelog and release notes for v3.5.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

build-release.ps1

@@ -103,10 +103,10 @@ if (Test-Path $syncScript) {
 # Anything matching these must NEVER appear in a release. Folders by name; files by
 # extension / exact name. RemSound.deps.json and RemSound.runtimeconfig.json are
 # legitimate app files and are deliberately NOT matched (different names).
-# 'config' added 2026-06-07: the config\ folder now holds global config (config\global config.json)
-# AND profiles (config\profiles\), so forbidding the whole folder catches both in one rule. The
-# legacy 'profiles' and 'remsound.config.json' rules stay for any pre-migration leftovers.
-$forbiddenFolders = @('logs', 'profiles', 'recordings', 'config')
+# 'user settings and logs' added 2026-06-10: that one folder now holds global config, profiles,
+# logs AND cue sounds, so forbidding it catches all the user state in one rule. The legacy 'config',
+# 'profiles' and 'remsound.config.json' rules stay for any pre-migration leftovers.
+$forbiddenFolders = @('logs', 'profiles', 'recordings', 'config', 'user settings and logs')
 function Test-Forbidden([string]$path) {
     $p = $path -replace '\\', '/'
     foreach ($f in $forbiddenFolders) {