docs: v0.137.0 cleanup bundle — REPORT + CONTEXT (email-wipe guard + Parts 2-4 disposition)

CONTEXT.md

@@ -7,7 +7,21 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-07-15 (v0.136.0 — .fab exclusion scoping, Task 4)
+Last updated: 2026-07-15 (v0.137.0 — cleanup bundle: email-wipe guard + carried hygiene)
+
+> **2026-07-15 — v0.137.0: cleanup bundle (email-wipe guard + carried hygiene).** Closes the arc's
+> carried micro-queue. **Part 1 (code):** `settingsNotificationsHandler` now REFUSES a save with a
+> blank email box while events are enabled (it would push empty to the hub → wipe the customer's
+> provisioning-seeded alert address — the 2026-07-15 demo incident). Returns before
+> SetNotificationPrefs + sync, Hungarian error, repaints submitted checkboxes; empty+zero-events
+> clear-all still allowed. No HTML `required` (it would block the legit clear-all). Tests + red-proof
+> in `web/notifications_guard_test.go`. Deployed 0.137.0 to 9201 (healthy). **Part 2 (hygiene):**
+> removed the confirmed-older `felhom-flash/backups/primary/immich` recovery unit (CreatedAt 06-23 <
+> live usb 07-15, 44M); STOPPED audiobookshelf/komga/romm on flash (CreatedAt TIED with usb →
+> tie-break is drive-order-dependent, not confirmable — manual disposition pending). **Part 3:**
+> campaign6 is a bare empty leftover dir (not a live mount); safe `rmdir` refused (Permission
+> denied — autofs-ghost/immutable); no mount disturbed → left for Viktor's reboot window. **Part 4:**
+> tagged the campaign6 6D-audit finding track-only (felhom.eu `dee72cd`).
 
 > **2026-07-15 — v0.136.0: `.fab` exclusion scoping (Task 4).** Architecture §2 `.fab` row + SQ5
 > verdict + R1-C. SQ6 over-capture FIXED for classified apps: the userdata root tar is exclude-scoped