document-release

SUSPICIOUS: the documentation purpose is plausible, but the actual footprint is broader than needed because it executes opaque local gstack binaries for update checks, config reads, and telemetry. The main concern is install/execution trust and unverifiable telemetry/data handling, not confirmed malware.