PawPause 1.0.10 safety, Claude, updates, and release refresh - #21

Summary

• make pet deletion fail closed so only PawPause-owned imported packages can be removed; legacy PetDex packages remain read-only
• add bounded ZIP validation/extraction and regression coverage for deletion, archives, and Claude event parsing
• support current Claude Code JSONL completion/tool-use events and document setup for issue 请问一下Claude code cli要怎么接入？ #20
• improve Hermes event discovery for Windows + WSL
• add pull-request CI, pin Node 22/pnpm, consolidate the workspace lockfile, and update patched dependencies
• add packaged-app automatic/manual update checks and multi-architecture updater metadata
• refine settings navigation, resizing, motion preferences, and renderer security defaults
• update the website, installer links, and bilingual release notes for v1.0.10

Verification

• frozen pnpm install
• Node 22 TypeScript typecheck
• 12 Vitest regression tests
• Node 22 Electron production build
• Node 22 Next.js production build
• GitHub Actions YAML parse and diff whitespace check

Dependency note

pnpm audit is down to two build-time high findings in electron-builder → minimatch → brace-expansion. The advisory only marks brace-expansion 5.0.8 as fixed, while those upstream packages currently depend on the 1.x/2.x APIs; forcing that major would be unsafe.

Fixes #19
Fixes #20