Pronto v0.5.3

Security patch: the standalone CLI embeds Bun 1.4.3, and CI/release tooling uses patched Node.js 22.23.4. Signed and notarized downloads, checksums, provenance, and signed update manifests are verified. The installed candidate passes startup checks for iMessage, WhatsApp, and Slack with settings preserved.

npm publication is complete: pronto-imessage@0.5.3 and pronto-whatsapp@0.5.3. Both are tagged latest. Their archives match the package tarballs attached to this release, and npm registry-signature and provenance verification pass.

What's Changed

• fix(ci): apply October Node.js security release by @eabnelson in #67
• fix(security): build Pronto with current Bun runtime by @eabnelson in #68
• chore(release): publish v0.5.3 security patch by @eabnelson in #69

Full Changelog: v0.5.2...v0.5.3