chore(api): bump etl for dev-app image_url + rune-count fixes (#350)

[raymondjacobson]

Summary

Bumps github.com/OpenAudio/go-openaudio and .../pkg/etl from e8586ac (#933) to bda0b8b.

Primary: go-openaudio #350 —

• persists developer_apps.image_url (previously dropped; 271 prod apps have it), gated by the legacy is_fqdn check;
• rune-counts the comment video_url and oauth redirect_uri length caps (byte-vs-rune over-strictness, same class as the name/bio fix).

Also carried (main advanced past the baseline):

• [API-292] Adds back comms websocket support #349 — let a collaborator leave a track after accepting (reuses the track_collaborators table).
• Add price and graduation information from DBC #351 — accept any genre string up to 100 chars (relaxes the genre allowlist).

core-indexer runs this vendored image, so the bump is required to ship the fixes.

Changes

• go.mod / go.sum: both go-openaudio modules → v1.3.1-0.20260609040102-bda0b8b592f5

Deploy note — no migration

Latest ETL migration stays 0033 (#349 reuses the existing track_collaborators table). Everything here is code-only — no schema change, no special rollout.

Test plan

• go mod tidy — only go.mod/go.sum changed
• go build ./... passes
• resolved module contains the image_url fix (validatedAppImageURL); migration unchanged (0033)
• Post-deploy: set a dev-app icon and a long multibyte comment video on the test account → both persist

🤖 Generated with Claude Code