[gyng]

Update frontend packages and the Rust dependency graph to current compatible releases, including React 19.3.1, Vite 8.3.5, Vitest/coverage 5.0.5, Tauri 2.12.5, tauri-build 2.7.4, and Tokio 1.54.1. Migrate the three getrandom calls to the 0.4 fill API. Keep windows-core on 0.62 because the current windows crate exposes those interface types.

Fix the STATIC_VCRUNTIME deprecation warning by pinning CLI 2.12.4 and configuring build.windows.staticVCRuntime. Reconcile the custom NSIS template with bundler 2.10.4 while preserving scoped process guards and replacement uninstallers. Update local build instructions and remove npm's ignored pnpm-only resolution-mode setting.

Validation:

• 4,698 frontend tests passed with 100% coverage; typecheck, lint, production build, and all 126 Playwright tests passed.
• 451 Rust tests passed (6 intentionally ignored); cargo fmt --check and cargo clippy --locked --all-targets -- -D warnings passed.
• Built a complete debug NSIS installer with CLI 2.12.4 and the final dependency graph; the deprecated STATIC_VCRUNTIME warning is absent.
• Installer process-guard, replacement-uninstaller, and resource-cleanup fixtures passed.
• npm outdated reports no remaining direct updates; npm audit reports zero known vulnerabilities.
• Windows dependency metadata declares no minimum Rust version above the project's Rust 1.95 requirement.