v3.0.0

What's Changed

• deps(frontend)(deps-dev): bump the npm-minor-and-patch group with 2 updates by @dependabot[bot] in #150
• fix(polling): drop write guard before persisting refreshed tokens (#180) by @Carme99 in #183
• feat(security): encrypt tokens.json at rest with keychain-stored AES key (#140) by @Carme99 in #184
• feat(tray): Spotify playback control, device picker and queue by @Carme99 in #185
• deps(security): resolve postcss + quinn-proto Dependabot alerts by @Carme99 in #186
• feat(presence): availability sync + meeting/call-aware status gating by @Carme99 in #187
• feat(updater): tauri-plugin-updater auto-update wired to GitHub Releases by @Carme99 in #188
• docs: 3.0 sweep — features, storage, presence, updater by @Carme99 in #189
• chore(release): bump version to 3.0.0 by @Carme99 in #190
• fix(updater): switch to password-encrypted signing key by @Carme99 in #191
• ci(winget): submit via Carme99/winget-pkgs fork by @Carme99 in #192
• fix(ci): add app target so macOS builds updater artifacts by @Carme99 in #193
• fix(ci): gh release upload needs --repo in the release job by @Carme99 in #194
• fix(ci): bump winget-releaser pin to add komac sync-fork (#182) by @Carme99 in #195
• fix(ci): gh release upload --clobber latest.json by @Carme99 in #196
• docs(ci): document workflow-scope requirement for WINGET_TOKEN (#182) by @Carme99 in #197

Full Changelog: v2.10.0...v3.0.0