v0.49.7

One sightglass fix. **Sightglass-only** — the daemon is behaviourally
identical to 0.49.6, so there is no reason to restart a node for this.
Sightglass ships in the release **tarball**, never the `.deb`; take it
from there, or the TUI stays on whatever version was last installed by
hand while the daemon moves on without it.

### Fixed

- **A trunk's peer list could be clipped mid-CIDR in sightglass.** `35.156.191.128/30` rendered as `35.156.191.128/3` — not merely ugly, because `/3` is itself a valid prefix length, so the table stated a range the config does not contain. Reported from a live session on a node with Twilio's eight CIDRs. The column now packs whole addresses only and appends an honest count of the rest (`54.172.60.0/30, 54.244.51.0/30, +6 more`), scaling with terminal width; where not even one address and its count fit, it degrades to a bare `8 peers` rather than clipping the count itself. The peers column also takes an exact width instead of a `Min`, so the budget is the real column rather than a guess at how leftover space gets divided. DESIGN_SIGHTGLASS.md §7: nothing truncates silently.

---

**Artifacts**

- Static musl binaries for `x86_64` and `aarch64` (`.tar.gz`).
- Debian packages (`.deb`) for `amd64` and `arm64` — `apt install ./siphon-ai_*_amd64.deb`.
- `SHA256SUMS` — verify with `sha256sum -c SHA256SUMS`.
- `*-sbom.cdx.json` — CycloneDX SBOM.
- `SHA256SUMS.cosign.bundle` — cosign keyless signature over the checksums.
- Container: `ghcr.io/thevoiceguy/siphon-ai:v0.49.7` (multi-arch, cosign-signed).

Verify the checksums signature:
```
cosign verify-blob --bundle SHA256SUMS.cosign.bundle \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp 'release.yml@' SHA256SUMS
```