v0.2.5

Hotfix — strongly recommended for v0.2.3 / v0.2.4 users

• Fixed: a failed openconnect handshake could leave a zombie child behind, with vpnc-script's DNS and route mutations applied but never reverted. Symptom: "WiFi connected but nothing has network access" until the user quit the app. connect() now always SIGTERMs any residual child on failure so vpnc-script's disconnect phase runs and restores DNS/routes.
• Safety gate: the pre-connect host-route flush now only deletes when route get returns a concrete IPv4 destination. Previously, when no dedicated host route existed, the fall-through destination="default" was passed to route delete, wiping the system default route.

Users on v0.2.0+ get this via "Check for Updates…" (Sparkle). Otherwise see INSTALL.md.