feat: link each changelog entry to its PR and commit (#11)

Like Immich's and RomM's release notes: every changelog entry now links to its pull request and its commit, in `CHANGELOG.md` and in the release notes on Gitea:

```
- Search with fzf's scoring and query syntax ([#11](…/pulls/11)) ([65dc2d7](…/commit/65dc2d7…))
```

- `cliff.toml`: the entry template adds the short commit hash as a link; a postprocessor turns the squash commit's `(#N)` into a link to the PR.
- The app shows release notes as text (`U`, and the status pane's changelog to come), so `Release.Notes()` turns Markdown links back into their text: `Search (#11) (65dc2d7)`.

Checked with `git cliff --unreleased` on main: every entry since v0.1.0 gets both links. Test for the link stripping.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com>
Reviewed-on: #11

internal/ui/app/edit.go

@@ -32,6 +32,15 @@ const sopsUnchanged = 200
 
 // edit opens the selected file, or the file of the selected secret.
 func (m *Model) edit() tea.Cmd {
+	if m.focus == paneDetail && m.fields.Shown() {
+		f, ok := m.fields.Selected()
+		if !ok || f.Path == "" {
+			m.flash = warning("nothing to open in an editor here")
+			return nil
+		}
+		name := filepath.Base(f.Path)
+		return m.openInEditor(provider.File{Path: f.Path}, func(err error) tea.Msg { return editDoneMsg{name: name, err: err} })
+	}
 	var c provider.Container
 	var o *provider.Object
 	switch m.focus {
@@ -81,30 +90,7 @@ func (m *Model) edit() tea.Cmd {
 		m.flash = flash{}
 		return tea.ExecProcess(cmd, finished)
 	}
-	if server := m.getenv("NVIM"); server != "" {
-		open := m.nvimOpen
-		return func() tea.Msg {
-			if err := open(server, f.Path, f.Line); err != nil {
-				return finished(err)
-			}
-			return tea.QuitMsg{}
-		}
-	}
-	if editor := cmpOr(m.getenv("VISUAL"), m.getenv("EDITOR")); editor != "" {
-		// Through the shell, so EDITOR can carry arguments ("code -w").
-		args := append([]string{"-c", editor + ` "$@"`, "lazysecrets"}, editorArgs(editor, f)...)
-		m.flash = flash{}
-		return tea.ExecProcess(exec.Command("/bin/sh", args...), finished)
-	}
-	switch err := m.openURL(f.Path); {
-	case errors.Is(err, browser.ErrRemote):
-		m.flash = warning("set $EDITOR to open files over SSH")
-	case err != nil:
-		m.flash = flash{text: "open: " + err.Error(), isErr: true}
-	default:
-		m.flash = done("opened " + name)
-	}
-	return nil
+	return m.openInEditor(f, finished)
 }
 
 // plusLine are editors that open at a line with +N before the file.
@@ -206,3 +192,33 @@ func nvimOpen(server, path string, line int) error {
 	}
 	return nil
 }
+
+// openInEditor opens f: in the nvim lazysecrets runs in, quitting; else
+// in $VISUAL or $EDITOR, coming back after; else in the default app.
+func (m *Model) openInEditor(f provider.File, finished func(error) tea.Msg) tea.Cmd {
+	name := filepath.Base(f.Path)
+	if server := m.getenv("NVIM"); server != "" {
+		open := m.nvimOpen
+		return func() tea.Msg {
+			if err := open(server, f.Path, f.Line); err != nil {
+				return finished(err)
+			}
+			return tea.QuitMsg{}
+		}
+	}
+	if editor := cmpOr(m.getenv("VISUAL"), m.getenv("EDITOR")); editor != "" {
+		// Through the shell, so EDITOR can carry arguments ("code -w").
+		args := append([]string{"-c", editor + ` "$@"`, "lazysecrets"}, editorArgs(editor, f)...)
+		m.flash = flash{}
+		return tea.ExecProcess(exec.Command("/bin/sh", args...), finished)
+	}
+	switch err := m.openURL(f.Path); {
+	case errors.Is(err, browser.ErrRemote):
+		m.flash = warning("set $EDITOR to open files over SSH")
+	case err != nil:
+		m.flash = flash{text: "open: " + err.Error(), isErr: true}
+	default:
+		m.flash = done("opened " + name)
+	}
+	return nil
+}