fix(ci): prevent no-op Tauri update PRs (#1915)

* fix(ci): prevent no-op Tauri update PRs

Detect npm and Cargo Tauri changes independently before handing the worktree to create-pull-request. Restore unrelated lockfile rewrites so scheduled updates only publish effective Tauri dependency changes.

* fix(ci): ignore Cargo dependency-list rewrites

Compare stable Tauri crate identity fields instead of full Cargo.lock package blocks. This prevents dependency-list normalization from reopening no-op updater PRs while preserving version, source, and checksum detection.