fix: audit round 2 - DPAPI secrets, pinned hop probe, gost exe hash, admin guard, PID-scoped browser tracking, emergency disengage button, build sidecar

proxy_chain_manager/config.py

@@ -200,6 +200,8 @@ class Settings:
     obfuscation_mode: str = "auto"       # see OBFUSCATION_MODES
     use_pinned_chain: bool = True         # use manually ordered chain from Chain Builder
     pinned_chain: list[str] = field(default_factory=list)  # user-ordered hop list
+    validate_pinned_on_start: bool = True  # quick TCP probe of each pinned hop before chaining
+    max_browser_relaunches: int = 5        # cap auto-relaunch attempts so a broken profile doesn't loop
     # Fixed last hop only (ignored when use_pinned_chain is True — full manual chain wins)
     manual_exit_proxy: str = ""