Dependency: glib 0.18.5 RUSTSEC advisory (VariantStrIter unsoundness) - inert for shipped Windows targets

[faratech]

Dependabot alert #71 (moderate): glib VariantStrIter Iterator unsoundness (RUSTSEC). glib is in Cargo.lock only under src-tauri Linux-target GTK stack (gdk/gtk 0.18); 0.18.5 is the latest 0.18.x and the fix requires 0.19+ - a GTK-stack/tauri upgrade. The shipped Windows MSIX never compiles this code, and the portable/Windows CI graphs exclude it.
Options: ride the next tauri upgrade (which will move the gtk/gdk/glib stack), or pin-ignore via cargo-audit configuration. Tracked so the weekly cargo-audit lane has context.

Decision needed (owner): upgrade timing vs documented ignore.

[faratech]

Resolved: the rollback-shell deletion removed the entire GTK/glib stack from Cargo.lock (verified zero glib entries), so the advisory no longer applies to any build graph in this repository. Dependabot will auto-close on its next lock scan.