This PR adds Windows support for Clips desktop voice dictation delivery, including a new user setting to choose paste+copy, copy-only, or type-only behavior, and updates the Tauri app versioning accordingly. It also fixes desktop email/password sign-in by allowing the Windows WebView2 origins in the desktop token exchange flow and stops rewriting wrong-password errors as malformed-email validation failures.

Overall the implementation is thoughtful and mostly backward-compatible: the auth allowlist change is narrowly scoped, the login error handling fix is appropriate, and the dictation delivery modes are wired cleanly through settings, frontend state, and the Tauri command surface. I’m classifying this as high risk because it touches authentication/session token delivery and OS-level text injection paths.

Key findings

• 🟡 MEDIUM: the new type-only mode can silently lose dictated text because it skips the clipboard fallback but still reports success before the async input synthesis actually succeeds.
• 🔵 LOW: copy-only still arms the post-paste vocabulary learner even though nothing was inserted into the focused field.

🧪 Browser testing: Will run after this review (PR touches UI code)