fix: correct ldflags module path for version injection

feat: make ListenPath a Secret

feat: add Secret type to redact config secrets from logs

refactor: rename channel to streamer across codebase

feat: add chat_id indexes to message log tables

feat: backfill chat_type for existing users

chore: forbid git -C in Claude guidelines

feat: fall back to text when bot lacks photo rights in chat

docs: clarify binary build output directory

fix: avoid concurrent db access in notification sending