chore: release v0.24.5

Patch release rolling up the follow-redirects 1.16.0 security fix
(GHSA medium: leaks Custom Authentication Headers to Cross-Domain
Redirect Targets) so it ships in a tagged build. v0.24.4 was tagged
before that fix landed on development.

Also updates npmDepsHash for the new lockfile.

chore: release v0.24.4

Note: npmDepsHash in flake.nix is now stale because the version field
in package-lock.json changed. The next `nix build .#` will fail with
the correct hash printed; update flake.nix and push a follow-up commit.
The GitHub Actions release workflow uses yarn directly and is unaffected.

fix: restore yarn.lock broken by npm install

chore: bump version to 0.24.2

chore: bump version to 0.24.1

chore: bump version to 0.24.0

fix: correct armv7l/arm64 AppImage filenames in conversion steps