chore: bump version to 1.2.5

fix(security): comprehensive security hardening

- Add CSP to Tauri desktop app
- Restrict CORS to allowed origins on API routes
- Add security headers to Next.js (HSTS, X-Frame-Options, etc.)
- Add webhook secret validation to prevent bypass
- Scope Tauri filesystem permissions to $APPDATA
- Add JSON.parse validation to prevent corrupted data issues
- Remove PII from server logs
- Update esbuild to fix moderate vulnerability

chore: bump version to 1.1.12

chore: bump version to 1.1.11

fix: scale icon to match dock icon sizes

fix: use website favicon directly as app icon (RGBA)

fix: use website favicon for app icon (macOS Tahoe)

- Source icons from web app icon.png
- Fill canvas with dark background for proper masking
- Remove SVG generation, use PNG source

fix: redesign app icon following Apple HIG

- Icon now fills entire canvas, macOS applies squircle mask
- Changed from S letter to sparkle/star design
- Regenerated all PNG, ICO, and ICNS files
- Improved settings page Y-axis spacing

fix: workflow gh commands need repo context, flexible asset patterns

- Use GH_REPO env var and absolute paths
- Asset patterns now match both old and new naming
- Bump to v1.1.5

chore: white-label by removing Darkroom branding