chore: bump to v2.0.1 — Windows CI + favicon route

Patch release. No breaking changes.

- Fixes cross-platform bug in plugin loader where PLUGINS_DIR was
  frozen at module-load time (homedir() differs on Windows vs Unix
  env vars). loadPlugins() / getLoadedPlugins() / ensurePluginsDir()
  now accept optional dir param; getPluginsDir() resolves fresh.
- Adds GET /favicon.ico route returning 238-byte inline SVG for
  clients that don't honor the dashboard's <link rel="icon"> tag.

CI verified green on Ubuntu + Windows × Node 20 + 22.
Tests: 640 -> 641.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: NickCirv

CHANGELOG.md

@@ -4,6 +4,38 @@ All notable changes to engram are documented here. Format based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versioning follows
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.0.1] — 2026-04-17 — Windows CI + favicon route
+
+Patch release fixing two issues caught immediately after v2.0.0 shipped.
+
+### Fixed
+
+- **Windows cross-platform bug in the plugin loader.** `PLUGINS_DIR` was a
+  module-load-time constant that baked in `homedir()` at import time. Windows
+  uses `USERPROFILE` while Unix uses `HOME`, and a frozen constant meant any
+  runtime override (tests, future `--plugins-dir` flag, programmatic use)
+  couldn't take effect without a module reload. Windows CI failed on the
+  plugin-loader tests because `process.env.HOME` mutation had no effect.
+  Fixed by introducing `getPluginsDir()` that resolves on every call, and
+  accepting an optional `dir` parameter on `loadPlugins()`,
+  `getLoadedPlugins()`, and `ensurePluginsDir()`. The `PLUGINS_DIR` constant
+  is retained for back-compat but runtime paths now go through the getter.
+- **`/favicon.ico` returning 404 for clients that ignore `<link rel="icon">`.**
+  Added an explicit `GET /favicon.ico` route to the HTTP server that serves
+  a 238-byte inline SVG favicon with `Cache-Control: public, max-age=86400`.
+  The dashboard HTML still inlines the same favicon via `<link>` so modern
+  browsers avoid the request entirely.
+
+### Changed
+
+- Test count: 640 → 641 (+1 for the "plugins directory does not exist"
+  branch of `loadPlugins()`).
+
+### CI
+
+- Verified green on GitHub Actions matrix: Ubuntu + Windows × Node 20 + 22.
+  Commit `7c6001c`.
+
 ## [2.0.0] — 2026-04-17 — "Ecosystem"
 
 The biggest release since v1.0.0. Completes the v2.0 roadmap Phases 1–4:

package.json

@@ -1,6 +1,6 @@
 {
   "name": "engramx",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "The context spine for AI coding agents. 8 providers + pluggable context sources, 3-layer memory cache, web dashboard, multi-IDE support (Claude Code, Cursor, Continue, Zed, Aider, Windsurf, Neovim, Emacs). 88.1% measured session-level token savings. Local SQLite, zero native deps, zero cloud.",
   "repository": {
     "type": "git",