0.3.9 — fix plugin registry (backend HTTPS, CORS), fold updater into a status-bar icon

- Plugin catalog/install failed silently: the webview fetch() to Gitea raw is
  blocked by CORS (no ACAO header). Route registry reads through a new Rust
  command registry_http_get (host-restricted) — catalog + installs now work.
- Updater: removed the floating card that overlapped the Terminal/Log/Updates
  buttons. Update state now shows as a single status-bar download icon (no text):
  idle → download glyph, available → accent + dot, checking/downloading → spinner.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/App.css

@@ -374,6 +374,12 @@ body.resizing{cursor:col-resize!important;user-select:none}
   color:var(--muted);border-radius:7px;padding:3px 10px;cursor:pointer;font-size:11.5px}
 .stlog:hover{color:var(--txt);border-color:var(--accent)}
 .stlog svg{width:13px;height:13px}
+.stlog.icon{padding:3px 7px}
+.stupd{position:relative}
+.stupd.has{color:var(--accent);border-color:var(--accent)}
+.stupd.busy{color:var(--accent-2)}
+.stupd[disabled]{cursor:default;opacity:.85}
+.stupd-dot{position:absolute;top:2px;right:2px;width:6px;height:6px;border-radius:50%;background:var(--accent);box-shadow:0 0 0 2px var(--panel)}
 .logpeek{position:absolute;left:8px;bottom:26px;width:520px;max-width:calc(100vw - 20px);max-height:min(340px,60vh);overflow-y:auto;z-index:250;
   background:var(--elevated);border:1px solid var(--border);border-radius:11px 11px 0 0;padding:5px;box-shadow:0 -14px 40px -12px rgba(0,0,0,.55)}
 .logpeek-h{position:sticky;top:0;padding:5px 9px 7px;font-size:10.5px;text-transform:uppercase;letter-spacing:.5px;color:var(--faint);