whoops, require path
Fix keep/delete logic

Just keep attachments that are actually tied to a version, but
don't keep anything else.
v0.3.5