writeFile wrote directly to the final path with os.WriteFile, contradicting
the "atomic write" behavior CLAUDE.md already documented. Now writes to a
temp file and renames into place, matching internal/state's approach, so a
concurrent reader (e.g. a consumer app polling the output directory) never
sees a partial PDF.
Also add freebsd/crontab.sample and freebsd/newsyslog.conf.sample for
running immemail in a FreeBSD jail: cron + lockf(1) in place of systemd's
timer + Type=oneshot serialization, with log rotation via newsyslog(8).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>