* main: set more permissive umask when creating work_dir This'll guarantee our working dir has the appropriate permissions, even when a user has a strict umask * update changelog Co-authored-by: Brad Warren <bmw@users.noreply.github.com>