Track and retire the temporary bevy_winit 0.19.1 feature patch

[hyperpolymath]

Why this exists

PR #104 vendors the published bevy_winit 0.19.1 source with source files unchanged and splits its Wayland CSD feature definitions. IDApTIK selects title-free decorations so native Wayland remains available without the ab_glyph -> ttf-parser path.

This is deliberately temporary. A vendored crate does not receive upstream security and correctness fixes automatically.

Removal / update priority

• Watch released Bevy / bevy_winit versions for independently selectable Wayland CSD/title features.
• On every Bevy upgrade, compare the complete vendored source and manifest with the corresponding published crate.
• Remove [patch.crates-io] and vendor/bevy_winit as soon as upstream exposes the required feature split.
• Until removal, update the vendored copy whenever IDApTIK updates Bevy and rerun:
  • cargo test -p idaptik-bevy
  • cargo clippy -p idaptik-bevy --all-targets -- -D warnings
  • cargo deny check --hide-inclusion-graph
  • hosted session-loopback
• Verify the relevant unmaintained/yanked font-parser path remains absent from the resolved graph.

Provenance

The exact rationale and removal condition are committed in vendor/README.md. This issue makes the maintenance obligation visible and schedulable rather than relying only on repository documentation.

[linear-code]

HYPER-12