cleave v2.0.0, stng v1.6.2, filefacts v1.0.1

The rest of the 2.0 stack lands alongside Atomdrift Scan: cleave's engine swap reaches stable, stng kills a class of XOR false positives, and filefacts goes panic-safe.