pqfile v3.0.1

Full Changelog: v3.0.0...v3.0.1

Security
Supply-chain vetting with cargo-vet - Every third-party Rust crate dependency is now audited via cargo-vet. Audit entries and exemptions are tracked in supply-chain/. CI runs cargo vet on every push and pull request to main, blocking unreviewed new dependencies.

CI / Deployment
Unified release + deploy workflow - The separate deploy.yml workflow has been removed. Deployment of the WASM web app is now triggered automatically as part of the release workflow when a version tag is pushed via bump-version.ps1. The release workflow downloads the WASM artifact and rsyncs it to the server.
Cargo dependency caching - CI now caches Cargo registry and build artifacts, reducing CI build times.

Bug Fixes
WASM build fixes - Resolved conditional-import issues in the GUI that caused the WASM target to fail to compile. Arc<Mutex<_>>, PathBuf, and several color/widget imports are now properly gated behind #[cfg(not(target_arch = "wasm32"))].

Chores
Removed stale Homebrew formula version update from bump-version.ps1.
Updated NGINX_DEPLOYMENT.md, QUICKSTART.md, and RELEASING.md to reflect the new tag-driven release process.