feat(extensions): 在 Rust 中验证签名发行包与有界 ZIP 清单

frontend/src-tauri/Cargo.lock

@@ -1294,9 +1294,24 @@ version = "2.2.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53"
 dependencies = [
+ "pkcs8",
  "signature",
 ]
 
+[[package]]
+name = "ed25519-dalek"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9"
+dependencies = [
+ "curve25519-dalek",
+ "ed25519",
+ "serde",
+ "sha2",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "ed25519-zebra"
 version = "4.2.0"
@@ -2927,6 +2942,7 @@ dependencies = [
  "base64 0.22.1",
  "chacha20poly1305",
  "command-group",
+ "ed25519-dalek",
  "fernet",
  "fs2",
  "hmac",
@@ -2942,9 +2958,12 @@ dependencies = [
  "tauri-build",
  "tempfile",
  "tokio",
+ "unicode-casefold",
+ "unicode-normalization",
  "uuid",
  "windows-sys 0.61.2",
  "zeroize",
+ "zip",
 ]
 
 [[package]]
@@ -5424,6 +5443,12 @@ dependencies = [
  "unic-common",
 ]
 
+[[package]]
+name = "unicode-casefold"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f66b1c8f8caa2ab31dc6d3f35386f16efdab89668f93411e565ac368908e8f"
+
 [[package]]
 name = "unicode-ident"
 version = "1.0.24"