feat(desktop): add dormant update safety boundary

Signed-off-by: QCYTSN <2558348385@qq.com>

.github/workflows/desktop-windows.yml

@@ -48,6 +48,10 @@ jobs:
         working-directory: desktop/electron
         run: npm ci
 
+      - name: Verify dormant update rejection and recovery policy
+        working-directory: desktop/electron
+        run: npm run test:update-safety
+
       - name: Verify encrypted credential storage
         working-directory: desktop/electron
         run: npm run smoke:credentials