feat: add a platform-aware apps download page

Serve desktop and Android builds from the latest Gitea release on /download, and fix the desktop compile and CI flakes that blocked v1.3.0.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/desktop/src-tauri/src/lib.rs

@@ -126,7 +126,7 @@ pub fn run() {
             let open = MenuItem::with_id(app, "open", "Открыть", true, None::<&str>)?;
             let quit = MenuItem::with_id(app, "quit", "Выход", true, None::<&str>)?;
             let menu = Menu::with_items(app, &[&open, &quit])?;
-            let icon: Image = include_image!("../icons/32x32.png");
+            let icon: Image = include_image!("icons/32x32.png");
             TrayIconBuilder::new()
                 .icon(icon)
                 .menu(&menu)

apps/desktop/src-tauri/src/proxy.rs

@@ -95,7 +95,9 @@ async fn forward(State(proxy): State<Proxy>, request: Request) -> Response {
         || origin.as_deref().is_some_and(|s| !allowed_origin(s))
     { return StatusCode::FORBIDDEN.into_response(); }
     let prefix = format!("/{}/api/", proxy.secret);
-    let Some(tail) = request.uri().path().strip_prefix(&prefix) else { return StatusCode::NOT_FOUND.into_response(); };
+    let path = request.uri().path().to_owned();
+    let Some(tail) = path.strip_prefix(&prefix) else { return StatusCode::NOT_FOUND.into_response(); };
+    let tail = tail.to_owned();
     // Prevent URL normalization escaping the configured API path, including encoded segments.
     if tail.split('/').any(|s| s == "." || s == "..") || tail.to_lowercase().contains("%2e")
         || tail.contains('\\') || tail.to_lowercase().contains("%5c") || tail.to_lowercase().contains("%2f")
@@ -106,7 +108,7 @@ async fn forward(State(proxy): State<Proxy>, request: Request) -> Response {
     let mut response = if request.method() == Method::OPTIONS {
         StatusCode::NO_CONTENT.into_response()
     } else {
-        match transfer(&proxy, request, tail.to_owned()).await {
+        match transfer(&proxy, request, tail).await {
             Ok(response) => response,
             Err(_) => (StatusCode::BAD_GATEWAY, "Server unavailable").into_response(),
         }