Update security module documentation: XDG paths and correct filenames

[Copilot]

The localgpt.rs security module documentation referenced outdated paths and filenames.

Changes

• File Hierarchy: Updated from legacy ~/.localgpt to XDG Base Directory Specification paths (~/.config/localgpt, ~/.local/share/localgpt, ~/.local/state/localgpt, ~/.cache/localgpt)

• Filenames: Corrected to match actual constants

  • .device_key → localgpt.device.key
  • .security_audit.jsonl → localgpt.audit.jsonl

• Quick Start: Fixed build_ending_security_block() call to include required include_suffix parameter

-//! let block = build_ending_security_block(user_policy.as_deref());
+//! let block = build_ending_security_block(user_policy.as_deref(), true);

Documentation now reflects actual implementation in paths.rs, signing.rs, and audit.rs.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• cdn.pyke.io
  • Triggering command: /home/REDACTED/work/localgpt/localgpt/target/debug/build/ort-sys-0cb9c8be1593958c/build-script-main /home/REDACTED/work/localgpt/localgpt/target/debug/build/ort-sys-0cb9c8be1593958c/build-script-main /home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d-I /home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d/home/REDACTED/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aws-lc-sys-0.37.1/include /home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d-I /home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d/home/REDACTED/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aws-lc-sys-0.37.1/aws-lc/include 7.1/generated-include /home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d/home/REDACTED/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aws-lc-sys-0.37.1/aws-lc/third_party/s2n-bignum/include 7.1/include /home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d/home/REDACTED/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aws-lc-sys-0.37.1/aws-lc/third_party/s2n-bignum/s2n-bignum-imported/include 7.1/aws-lc/include /home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d/out/a445302c6d3dcb51-utf16_be.o 7.1/aws-lc/third_party/s2n-bignum/include know�� 7.1/aws-lc/third_party/s2n-bignum/s2n-bignum-imported/include f/aws-lc-sys-0.3-gdwarf-4 7.1/aws-lc/third_party/jitterentropy/jitterentropy-library f/aws-lc-sys-0.3ar /index.crates.iocq f/aws-lc-sys-0.3/home/REDACTED/work/localgpt/localgpt/target/debug/build/onig_sys-ef1816382bd16b0d-g fc/out/caa8b30982b4915c-ocsp_print.o (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.