v0.289.1: strip the provider rclone notice; an unreadable snapshot count is never a measured zero (found live on demo-felhom)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CHANGELOG.md

@@ -1,3 +1,17 @@
+## v0.289.1 — the provider's rclone notice no longer reads as "0 snapshots" (found live on demo-felhom) (2026-10-03)
+
+**MinAgent: 0.131.0** (unchanged). Needs hub v0.127.0 (unchanged).
+
+- **Found live in the first run through the pinned key:** the provider's rclone prints
+  `NOTICE: Config file … not found - using defaults` on every connection, restic forwards it into the combined output,
+  every `--json` parse failed, and the box recorded **0 snapshots as MEASURED** (`stats_known`) over a store holding 12 —
+  the shape the hub's R-431 detector reads as a mass deletion — and the clean-up step could not list snapshots.
+  `Manager.runner()` now strips exactly that notice line (`stripRcloneNotice`; an rclone ERROR line stays).
+- **An unreadable snapshot count is no longer a measured zero (R-331 class):** `offboxRecordStats` returns
+  `(count, ok)`; on a failed or unparseable listing the box keeps the last measured count and reports `stats_known=false`.
+- Tests: `TestStripRcloneNotice`, `TestRunOffbox_UnreadableCountIsNotZero` (red-proved). **Second release this session,
+  against the one-release rule, because v0.289.0 was live on a box and reporting a false zero.**
+
 ## v0.289.0 — the off-site key cannot delete: append-only transport, no password on the box, retention only inside a hub window (decisions 68–69, R-820, R-822) (2026-10-03)
 
 **MinAgent: 0.131.0** (unchanged). **Needs hub v0.127.0** (the key registrar and the window endpoints; an older hub