- Use vendored OpenSSL in thoughts_tool for macOS cross-compilation
- Add version constraint back to universal-tool dev-dependency for security checks
  (using flexible 0.1 instead of exact 0.1.1 to avoid circular dependency)