chore: release 1.2.2 - #19

  Expo releases carry the app config (Constants.expoConfig), and fail when it can't be read
  (--appConfig / --skipAppConfig). Expo uploads retry a busy server for up to five minutes.
  Expo promote/rollback exit 1 when a target failed or was busy; an already-rolled-back target is success.
  Commands that ask "Are you sure?" take --yes / -y, so rollback and removals can run in CI.
  Names are percent-encoded in request URLs (urlEncode never encoded anything), and . / .. are refused.
  A failed package write no longer exits 0 with nothing released.
  API validation errors print as sentences instead of raw JSON.
  access-key ls shows Last used; session ls shows machine and IP; app transfer reports the emailed invite;
  login shows the server's 401 reason; HTML entities in API errors are decoded.
  Lint runs again on ESLint 9 (eslint.config.mjs), with six unused-code cleanups.