What’s new
- Adds cryptographically signed in-app updates with safe handling for installed, portable, package-manager, AppImage, and macOS disk-image copies.
- Simplifies scan-result storage and extracts playlist scoring into focused modules.
- Strengthens CI with Rust linting, formatting, frontend linting, fuzz smoke tests, and end-to-end scan pipeline coverage.
Release reliability
- Repairs public download links and generates the macOS updater archive required by the release workflow.
- Refreshes compatible frontend, Rust, Tauri, and GitHub Actions dependencies.
- Gates both Windows architectures on current Microsoft Defender cloud, real-time, archive, application, ffmpeg, and ffprobe scans.
Ref #217