CyberSnapper 2.3.1: content blocking and verified packages

[Alex9001]

CyberSnapper 2.3.1 (2026-08-22)

CyberSnapper 2.3.1 is the corrective release for the content-blocking update.
It replaces the incomplete 2.3.0 package set and fixes defects found while
auditing every change since 2.2.2.

Content blocking fixes

• Unsafe or unsupported community rules are now removed before the rules
  engine is created, rather than merely counted in diagnostics.
• Selected custom rulesets persist through the configuration dialog and new
  rulesets can be enabled for the profile immediately.
• Cookie-consent handling runs in document frames, waits briefly for
  asynchronous banner removal, and only releases scroll locks after a
  recognized banner disappears.
• PageSpeed's built-in handler no longer prevents applicable custom actions
  from running.
• Subscription redirects follow the validated destination and oversized list
  downloads are stopped as soon as they cross the 10 MiB limit.
• Ruleset digests are stable for identical inputs, so repeated jobs reuse the
  same content-addressed snapshot while retries continue using their exact
  original snapshot.

The prematurely exposed list-pinning option has been removed. Captures use the
latest locally cached lists at submission time; the resulting job snapshot is
then immutable and reused for retries.

Packaging fixes

• Restores valid release-workflow YAML and removes the failed binary-mirror
  workaround.
• Downloads linuxdeploy, its Qt plugin, appimagetool, and the type-2 runtime
  from immutable versioned upstream releases with verified SHA-256 hashes.
• Uses native Node and Qt packages for each architecture, including the
  official Linux arm64 Qt host package.
• Builds Linux x64 on Ubuntu 22.04 for a lower glibc compatibility floor and
  Linux arm64 on Ubuntu 24.04 as required by Qt.
• Requires Chromium, Firefox, and WebKit to actually launch in the release
  browser-matrix test instead of silently skipping unavailable engines.
• Produces and smoke-tests all twelve expected assets: AppImage/tar.gz,
  setup/portable ZIP, and DMG/ZIP for x64 and arm64.

Every release asset is covered by SHA256SUMS.txt and GitHub build-provenance
attestation. Packages remain unsigned on Windows and Linux; macOS bundles are
ad-hoc signed and not notarized.