chore(deps): roll up Dependabot updates

[avifenesh]

What changed

• update actions/setup-node from v6 to v7
• update softprops/action-gh-release from v3.0.1 to v3.0.2
• update x11rb from 0.13.2 to 0.14.0
• refresh the shared GPUI/GPUI Platform git lock from 5f8a741 to c9e8e61
• update tokio from 1.52.3 to 1.53.0
• replace yanked spin 0.9.8 and 0.10.0 with compatible 0.9.9 and 0.10.1 patch releases

This consolidates and supersedes #43, #44, #45, #46, #47, and #48. The two GPUI PRs resolve to the same Cargo.lock update.

Why

Each Dependabot PR passed the functional checks but failed the supply-chain job after the existing lockfile's two spin releases were yanked. Exact compatible patch updates remove those warnings without weakening the audit policy.

Validation

• cargo fmt --check
• cargo build --locked
• scripts/install_smoke.sh
• cargo clippy --locked -- -D warnings
• cargo test --locked (172 passed)
• CI-equivalent cargo audit --deny warnings command
• JavaScript syntax checks
• npm postinstall tests and package dry-run
• agnix skills/
• git diff --check

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.