merge(release): reconcile the 0.13.0 bump with today's landings

Brings origin's release prep (widgets App Store profile mapping + workspace
version 0.13.0) into the local line that landed the Linux stream sink, the
Windows client-only audio rework, the July security-audit fixes, cross-client
render-scale, and the widgets scheme. release.yml was byte-identical on both
sides; no other file overlap.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Cargo.lock

@@ -2145,7 +2145,7 @@ dependencies = [
 
 [[package]]
 name = "latency-probe"
-version = "0.12.0"
+version = "0.13.0"
 
 [[package]]
 name = "lazy_static"
@@ -2277,7 +2277,7 @@ checksum = "0ceec5bc11778974d1bcb055b18002eba7f4b3518b6a0081b3af5f21666da9ad"
 
 [[package]]
 name = "loss-harness"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "punktfunk-core",
 ]
@@ -2756,7 +2756,7 @@ checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
 
 [[package]]
 name = "pf-capture"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ashpd",
@@ -2776,7 +2776,7 @@ dependencies = [
 
 [[package]]
 name = "pf-client-core"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ash",
@@ -2817,7 +2817,7 @@ dependencies = [
 
 [[package]]
 name = "pf-console-ui"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ash",
@@ -2838,7 +2838,7 @@ dependencies = [
 
 [[package]]
 name = "pf-encode"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ash",
@@ -2860,7 +2860,7 @@ dependencies = [
 
 [[package]]
 name = "pf-ffvk"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "ash",
  "bindgen",
@@ -2869,7 +2869,7 @@ dependencies = [
 
 [[package]]
 name = "pf-frame"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "libc",
@@ -2881,7 +2881,7 @@ dependencies = [
 
 [[package]]
 name = "pf-gpu"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "pf-host-config",
@@ -2895,7 +2895,7 @@ dependencies = [
 
 [[package]]
 name = "pf-host-config"
-version = "0.12.0"
+version = "0.13.0"
 
 [[package]]
 name = "pf-inject"
@@ -2927,14 +2927,14 @@ dependencies = [
 
 [[package]]
 name = "pf-paths"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "tracing",
 ]
 
 [[package]]
 name = "pf-presenter"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ash",
@@ -2979,7 +2979,7 @@ dependencies = [
 
 [[package]]
 name = "pf-win-display"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "pf-paths",
@@ -2991,7 +2991,7 @@ dependencies = [
 
 [[package]]
 name = "pf-zerocopy"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ash",
@@ -3174,7 +3174,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-client-android"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "android_logger",
  "jni",
@@ -3190,7 +3190,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-client-linux"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "async-channel",
@@ -3206,7 +3206,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-client-session"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "pf-client-core",
@@ -3221,7 +3221,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-client-windows"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "async-channel",
  "ffmpeg-next",
@@ -3240,7 +3240,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-core"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "aes-gcm",
  "bytes",
@@ -3271,7 +3271,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-host"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "aes",
  "aes-gcm",
@@ -3353,7 +3353,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-probe"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "mdns-sd",
@@ -3367,7 +3367,7 @@ dependencies = [
 
 [[package]]
 name = "punktfunk-tray"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ksni",
@@ -3384,7 +3384,7 @@ dependencies = [
 
 [[package]]
 name = "pyrowave-sys"
-version = "0.12.0"
+version = "0.13.0"
 dependencies = [
  "bindgen",
  "cmake",

Cargo.toml

@@ -47,7 +47,7 @@ exclude = [
 ndk = { path = "clients/android/native/vendor/ndk" }
 
 [workspace.package]
-version = "0.12.0"
+version = "0.13.0"
 edition = "2021"
 rust-version = "1.82"
 license = "MIT OR Apache-2.0"

api/openapi.json

@@ -10,7 +10,7 @@
       "name": "MIT OR Apache-2.0",
       "identifier": "MIT OR Apache-2.0"
     },
-    "version": "0.12.0"
+    "version": "0.13.0"
   },
   "paths": {
     "/api/v1/clients": {

crates/pf-capture/Cargo.toml

@@ -6,7 +6,7 @@
 # (FrameChannelSender), so the capture→encode edge is one-way (plan §2.4).
 [package]
 name = "pf-capture"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 rust-version.workspace = true
 license = "MIT OR Apache-2.0"

crates/pf-encode/Cargo.toml

@@ -5,7 +5,7 @@
 # (CUDA), never pf-capture — the capture→encode edge is one-way (plan §2.4).
 [package]
 name = "pf-encode"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 rust-version.workspace = true
 license = "MIT OR Apache-2.0"

crates/pf-frame/Cargo.toml

@@ -5,7 +5,7 @@
 # can depend on the vocabulary WITHOUT depending on each other.
 [package]
 name = "pf-frame"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 rust-version.workspace = true
 license = "MIT OR Apache-2.0"

crates/pf-gpu/Cargo.toml

@@ -3,7 +3,7 @@
 # depending on the orchestrator (plan §W6). Self-contained: reads config + writes the pref store.
 [package]
 name = "pf-gpu"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 license = "MIT OR Apache-2.0"
 description = "punktfunk host GPU vendor/adapter enumeration, selection preference, and active-session accounting."

crates/pf-host-config/Cargo.toml

@@ -3,7 +3,7 @@
 # WITHOUT depending on the orchestrator (plan §W6 — config parked above its consumers). Pure std.
 [package]
 name = "pf-host-config"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 license = "MIT OR Apache-2.0"
 description = "Process-wide punktfunk host configuration (env-parsed HostConfig behind a OnceLock)."

crates/pf-paths/Cargo.toml

@@ -3,7 +3,7 @@
 # module they used to live in (plan §W6). Pure std + tracing; no platform I/O stack.
 [package]
 name = "pf-paths"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 license = "MIT OR Apache-2.0"
 description = "Host config-directory resolution + owner-private file/dir creation (0600/0700 or SYSTEM/Admins DACL)."

crates/pf-win-display/Cargo.toml

@@ -6,7 +6,7 @@
 # compiles to an empty lib elsewhere.
 [package]
 name = "pf-win-display"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 rust-version.workspace = true
 license = "MIT OR Apache-2.0"

crates/pf-zerocopy/Cargo.toml

@@ -5,7 +5,7 @@
 # plain (non-target-gated) dependency.
 [package]
 name = "pf-zerocopy"
-version = "0.12.0"
+version.workspace = true
 edition = "2021"
 # Inherit the workspace MSRV: clippy keys MSRV-gated lints off it (without this, e.g.
 # `manual_is_multiple_of` fires on code the host crate compiles clean).