chore: Bump `time` and `deranged`, avoid `PartialOrd` ambiguity

tests: Add test for loading invalid PNGs

build(deps): bump the cargo-minor group with 3 updates

Bumps the cargo-minor group with 3 updates: [log](https://github.com/rust-lang/log), [zip](https://github.com/zip-rs/zip2) and [vfs](https://github.com/manuel-woelker/rust-vfs).


Updates `log` from 0.4.26 to 0.4.27
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.26...0.4.27)

Updates `zip` from 2.4.2 to 2.5.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v2.4.2...v2.5.0)

Updates `vfs` from 0.12.0 to 0.12.1
- [Commits](manuel-woelker/rust-vfs@v0.12.0...v0.12.1)

---
updated-dependencies:
- dependency-name: log
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: zip
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: vfs
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

web: Fix vulnerability for upstream dependency

Applies `npm audit fix` suggestion
This only upgrades `@babel/helpers` packages, so shoudn't be a big deal

Vulnerability:

@babel/helpers  <7.26.10
Severity: moderate
Babel has inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups - GHSA-968p-4wvh-cqc8

avm2: Log stub warning when Video.attachNetStream(null) is called

tests: Add avm1/input_dead_keys_windows test

This test covers the use case of inputting text
using dead keys on Windows.

desktop: Implement IME

Implements IME support (currently still limited by the core impl).

build(deps): bump the cargo-minor group across 1 directory with 3 upd…

…ates

Bumps the cargo-minor group with 3 updates in the / directory: [tokio](https://github.com/tokio-rs/tokio), [quote](https://github.com/dtolnay/quote) and [zip](https://github.com/zip-rs/zip2).


Updates `tokio` from 1.44.0 to 1.44.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.44.0...tokio-1.44.1)

Updates `quote` from 1.0.39 to 1.0.40
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.39...1.0.40)

Updates `zip` from 2.2.3 to 2.4.1
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v2.2.3...v2.4.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: quote
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: zip
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

text: Simplify an expression in text_input

tests: Add test for loading into root with mixed AVM