perf(desktop): reduce CPU/GPU overhead in Tauri shell

- SSH monitor: adaptive polling 2s→10s after stabilization, cheap TCP
  probe before expensive SSH subprocess check
- SSH setup: exponential backoff in wait_for_master_ready and
  wait_local_forward_ready (250ms→2s cap)
- Health checks: exponential backoff (100ms→1s / 250ms→2s) instead of
  flat intervals
- Startup recovery poll: cap at 15 retries instead of infinite
- Remove webview log target in release builds (eliminates IPC overhead)
- Set global NO_PROXY env var at startup for all loopback addresses
- Remove reqwest::blocking feature; use raw TCP for sidecar shutdown and
  SSH health checks
- Disable pinch-to-zoom on macOS via WKWebView.setAllowsMagnification
- Add WebView2 browser args on Windows (proxy bypass + disable unused
  UI features)
- Add Cargo release profile: thin LTO, codegen-units=1, strip
- Extract apply_platform_window_config for consistent window setup
- Add vibrancy toggle in Appearance settings (macOS desktop only) with
  solid background fallback when disabled

packages/desktop/src-tauri/Cargo.toml

@@ -16,7 +16,7 @@ devtools = ["tauri/devtools"]
 anyhow = "1.0.86"
 base64 = "0.22.1"
 log = "0.4.28"
-reqwest = { version = "0.12.4", default-features = false, features = ["rustls-tls", "blocking"] }
+reqwest = { version = "0.12.4", default-features = false, features = ["rustls-tls"] }
 serde = { version = "1.0.210", features = ["derive"] }
 serde_json = "1.0.143"
 tauri = { version = "2.10.3", features = ["macos-private-api"] }
@@ -31,5 +31,12 @@ url = "2.5"
 [build-dependencies]
 tauri-build = { version = "2.5.6", features = [] }
 
+[profile.release]
+lto = "thin"
+codegen-units = 1
+strip = true
+
 [target.'cfg(target_os = "macos")'.dependencies]
+objc2 = "0.6"
+objc2-web-kit = "0.3"
 window-vibrancy = "0.7.1"