feat: complete safe profile lifecycle management - #18

Summary

Named organization profiles could not safely rotate an expired key or remove every local integration. Concurrent sessions also needed stronger ownership checks during cleanup.

This change adds offline lifecycle help, same-organization key rotation, confirmed key-expiration status, orphan-proxy cleanup, and complete local-only uninstall. Updates preserve active sessions, profile settings, organization identity, and the previous generation on failure. Unix and Windows now use equivalent lock, credential-store, process-ownership, path, and crash-recovery safeguards.

Validation

• All tests/*.sh passed on macOS.
• shellcheck -S warning install.sh qbraid-code statusline.sh tests/*.sh
• Bash syntax checks passed for production scripts and shell tests.
• Every PowerShell script parsed successfully.
• PSScriptAnalyzer reported no errors.
• Native Windows lifecycle and Credential Locker suites are included in CI.
• git diff --check

Generated by GPT-5.4 using the Prime Agent harness.