ci: improve release builds and update maintenance

[LeenHawk]

Summary

• enable verified UPX compression and smoke checks for additional release targets
• avoid persistent self-update rollback copies and clean up legacy backups
• add Dependabot and CodeQL automation

Verification

• cargo test selfupdate::swap
• cargo clippy --all-targets --all-features -- -D warnings
• git diff --check origin/main...HEAD

[Copilot]

Pull request overview

This PR enhances the project’s release/maintenance automation and updates the self-update swap behavior to avoid leaving persistent rollback artifacts behind after successful installs.

Changes:

• Updated native self-update swap logic to use temporary companion backups during installation and remove legacy .prev files after success.
• Expanded release CI to run UPX compression + smoke checks for additional targets (including RISC-V) with checksum verification.
• Added repository automation via CodeQL scanning and Dependabot update configuration, and aligned docs/UI copy with the new update behavior.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
src/selfupdate/swap.rs	Reworks companion backup/restore flow to use temporary backups and cleans up legacy .prev artifacts on success.
docs/src/content/docs/zh-cn/introduction/architecture.md	Adjusts §19 description wording to reflect “update artifacts” terminology.
docs/src/content/docs/introduction/architecture.md	Same terminology update in the English architecture index.
console/src/locales/zh-TW/update.json	Updates update-confirmation copy to remove .prev rollback mention.
console/src/locales/zh-CN/update.json	Updates update-confirmation copy to remove .prev rollback mention.
console/src/locales/en/update.json	Updates update-confirmation copy to remove .prev rollback mention.
.github/workflows/release.yml	Adds verified UPX installation/building and additional smoke checks (incl. QEMU for RISC-V) across more targets.
.github/workflows/codeql.yml	Adds CodeQL workflow for JS/TS and Rust.
.github/dependabot.yml	Adds Dependabot update automation for Cargo and multiple npm directories.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.