fix(deps): refresh packages and harden engine staging

- update npm, Cargo, Deno, and FFmpeg lockfiles
- refresh verified cross-platform engine payload metadata
- serialize staging, verification, and Tauri packaging across concurrent runs
- recover interrupted lock records and cover crash and ownership races

scripts/tauri-command.node-test.js

@@ -0,0 +1,11 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { commandUsesEngineTree } from './tauri-command.js';
+
+test('Tauri engine-consuming commands hold the shared staging lease', () => {
+  assert.equal(commandUsesEngineTree(['dev']), true);
+  assert.equal(commandUsesEngineTree(['build', '--target', 'x86_64-unknown-linux-gnu']), true);
+  assert.equal(commandUsesEngineTree(['bundle', '--bundles', 'appimage']), true);
+  assert.equal(commandUsesEngineTree(['info']), false);
+  assert.equal(commandUsesEngineTree(['--help']), false);
+});