feat: add bump-version.sh script for version management

Automates version bumps across all version source files:
- Cargo.toml (PRIMARY - workspace.package.version)
- debian/changelog (prepend new entry)
- debian/control (update Version field)
- scripts/build-package.sh (update VERSION variable)
- frontend/package.json (update version field)
- Stale references check after bump

Usage: ./scripts/bump-version.sh <new_version> <old_version>

.cargo/audit.toml

@@ -0,0 +1,10 @@
+[advisories]
+# RSA vulnerability in sqlx-mysql - upstream issue, no fix available
+ignore = [
+    "RUSTSEC-2023-0071",  # Marvin Attack: potential key recovery through timing sidechannels
+    "RUSTSEC-2025-0134",  # rustls-pemfile is unmaintained
+]
+
+[output]
+quiet = false
+show_tree = true