Installing a Setup.exe over an existing install deleted accounts.json,
settings.json and the logs: Velopack uninstalls the previous version first and
removes the whole install root, and gclo kept its data in that same folder
(%LOCALAPPDATA%\gclo). The default data root is now
%LOCALAPPDATA%\KofTwentyTwo\gclo for the app, the CLI and the activity log;
GCLO_DATA_DIR still overrides it. No migration: the app has a single user on a
single machine today. The default vault scope stays unscoped, so existing
Credential Manager entries keep working. Docs, threat model and tests follow.
Closes#91
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>