v2.9.0

LinkUnbound 2.9.0 - Close the picker with a click, or open it centered

Until now the picker closed only with Esc or a click outside it, and it always
opened next to the pointer.

• The picker has an × next to copying the address, so it closes with a click.
• You can choose to open the picker in the center of the screen you are
  looking at. If you change nothing, it still opens next to the pointer.
• The look of the picker and where it opens now sit together in their own
  section of Settings.

What's Changed

• fix(winget): the manifest speaks schema 1.28.0, the one winget-pkgs still takes, and points at 2.8.0 by @rgdevment in #74
• fix(deps): pulldown-cmark 0.13.6 leaves the version RUSTSEC-2026-0414… by @rgdevment in #75
• fix(deps): tauri-plugin-updater 2.14.1 brings zip 9.1.3, closing the zip cloaking, symlink and AES HMAC advisories by @rgdevment in #76
• chore(deps): Dependabot's Rust, npm and Actions updates land together. by @rgdevment in #82
• chore: bump taiki-e/install-action from 2.87.31 to 2.87.32 in the actions group by @dependabot[bot] in #83
• ci: branches named kind/what, one-line commits, and CI that skips what a branch never touched, as Tisty does by @rgdevment in #84
• ci(release): only a sign-updater job holds the updater key, and every signature must name the tag's version by @rgdevment in #85
• docs: winget install by @rgdevment in #87
• fix(deps): cargo-deny lets pin-utils through, unmaintained and reached only through Slint with no upgrade by @rgdevment in #88
• feat(picker): a close button beside copy, and a setting to open it centered on the pointer's screen by @rgdevment in #89
• ci: a pull request pays only for what it touched, and the Mac weighs only the mutants Linux cannot by @rgdevment in #90
• fix: brew trusts the tap before installing, and the welcome link opens rgdevment.dev by @rgdevment in #91
• feat(news): what 2.9.0 brings, a close button and a picker that can open centered by @rgdevment in #92

Full Changelog: v2.8.0...v2.9.0