- Added hardened file permissions on agent database directory (700) and database file (600) for improved security. - Changed auth migration to merge credentials per-provider instead of skipping when any credentials exist. - Added migration of settings from legacy settings.json file to SQLite database storage. - Added fallback to legacy auth.json for OAuth credentials when not found in primary storage. - Added hardenPermissions method to set restrictive chmod on database directory and file.