[snabb]

Summary

• constrain preset and custom voice paths to their configured roots
• serialize on-demand voice loading and cloning with synthesis without blocking the event loop
• pin BlueTTS and Renikud model revisions and verify every downloaded artifact with SHA-256
• omit configured voices that fail to preload and stop startup when no usable default remains
• smoke-test both image variants on native amd64 and arm64 runners before publishing public tags
• enforce matching package, runtime, and Home Assistant app versions in tests

Validation

• uv run prek run --all-files
• uv run -m pytest (50 passed)
• dash -n run.sh
• busybox ash -n run.sh
• git diff --check master...HEAD