deps: update dependencies and document glib vulnerability

[SuperKali]

Summary

• Update 79 Rust dependencies to latest compatible versions
• Document security tracking for transitive glib vulnerability in Cargo.toml
• All quality checks pass: cargo check ✅, clippy ✅, fmt ✅

Dependency Updates

Key updates include:

• Tauri plugins: tauri-plugin-dialog 2.4.2 → 2.6.0, tauri-plugin-shell 2.3.3 → 2.3.4, tauri-plugin-store 2.4.1 → 2.4.2
• Core runtime: tokio 1.48.0 → 1.49.0, reqwest 0.12.24 → 0.12.28
• Compression: lzma-rust2 0.15.4 → 0.15.7, flate2 1.1.5 → 1.1.8
• Utilities: chrono 0.4.42 → 0.4.43, serde_json 1.0.145 → 1.0.149

Security Note

Added documentation for GHSA-wrw7-89jp-8q8g (glib 0.18.5 NULL pointer dereference).

Current status:

• glib 0.18.5 remains in use as it's a transitive dependency: tauri → wry → gtk → glib
• This application does NOT use glib directly
• Fix must come from upstream
• Only affects Linux builds (macOS/Windows use different webview backends)

Testing

• ✅ cargo check - no compilation errors
• ✅ cargo clippy - no linter warnings
• ✅ cargo fmt --check - code properly formatted

Breaking Changes

None. All updates are backward compatible within SemVer constraints.

[github-actions]

🧪 Test Builds

Version: 0.0.0-pr.88 | PR: #88 | Status: ready for testing

Platform	Download
Linux x64	📦 .deb / .AppImage
Windows x64	📦 .exe
macOS ARM64	📦 .dmg

ℹ️ About these builds

• 🔓 Public downloads via nightly.link (no GitHub login required)
• ⚠️ Unsigned builds for testing purposes only
• ⏰ Expires in 7 days
• 🔄 Updated on every push to this PR