v0.2.2

fix: auto-update robustness

- deb/rpm installs no longer download updates (pkexec failure); they show
  a notice and a Download button opening the Releases page instead
- space-free NSIS artifact name so latest.yml matches the release asset
- bump version to 0.2.2