chore(deps): refresh npm and Rust dependencies (#997)

* chore(deps): bump npm patch/minor dependencies

Refresh frontend lockfile for React, Vite, Vitest, i18next, axios, Tauri
plugins, and related type packages within existing semver ranges.

* chore(deps): bump Rust patch dependencies

Update id3 to 1.17, reqwest to 0.13.4, and align root zbus with psysonic-audio 5.16.

* chore(deps): upgrade jsdom to v29

Major test-environment bump; all Vitest suites still pass and npm audit is clean.

* chore(deps): upgrade sysinfo 0.39 and zip 8

Align root sysinfo with psysonic-syncfs and migrate backup archives to zip 8.
mach2 0.6 deferred — cpal/rodio still require ^0.5.

* chore(nix): sync npmDepsHash with package-lock.json

* docs(changelog): note dependency refresh (PR #997)

* docs(changelog): move deps note to [1.48.0] section

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

src-tauri/crates/psysonic-audio/Cargo.toml

@@ -25,7 +25,7 @@ md5 = "0.8"
 url = "2"
 thread-priority = "3"
 lofty = "0.24"
-id3 = "1.16.4"
+id3 = "1.17"
 pitch_shift = "2.1"
 
 [target.'cfg(unix)'.dependencies]

src-tauri/crates/psysonic-syncfs/Cargo.toml

@@ -22,7 +22,7 @@ sysinfo = { version = "0.39", default-features = false, features = ["disk"] }
 url = "2"
 md5 = "0.8"
 lofty = "0.24"
-id3 = "1.16.4"
+id3 = "1.17"
 
 [dev-dependencies]
 tempfile = { workspace = true }