Fix dependency vulnerabilities

[tanRdev]

Summary

• update npm and Rust lockfiles to patched dependency releases
• move the Windows-only quick-xml chain from 0.37.5 to patched 0.41.0
• remove the obsolete RustSec exception and require a clean vulnerability audit
• refresh generated Tauri capability schemas after the Rust updates

Verification

• npm audit — 0 vulnerabilities
• cargo audit — 0 vulnerabilities (maintenance/unsoundness warnings remain informational)
• npm run verify:code — formatting, lint, typecheck, frontend tests/build, Rust fmt/clippy/tests/build, audits, and workflow validation pass